PricingCase studies Login Start trial
WPCafe icon

WPCafe

Arraytics

Developer

3.0.23

Latest version

5,000

Installations

No date

Last updated

WordPress Plugin
Active VDP
Report vulnerability
    VulnerabilitiesSecurity PolicySecurity Contributors

Vulnerability history

0 present
16 patched
3 Mitigation rules
  • Unauthenticated Product Data Disclosure vulnerability
    < 3.0.21
    07/10/2026
  • Authenticated (Contributor+) Local File Inclusion vulnerability
    <= 3.0.18
    02/10/2026
  • Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete vulnerability
    <= 3.0.19
    02/10/2026
  • Unauthenticated Order Disclosure and Modification vulnerability
    3.0.10-3.0.17
    11/09/2026
  • Unauthenticated Reservation Approval Bypass vulnerability
    < 3.0.18
    26/08/2026
  • Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification vulnerability
    <= 3.0.14
    09/07/2026
  • Broken Access Control vulnerability
    <= 3.0.14
    25/06/2026
  • Broken Access Control vulnerability
    <= 3.0.7
    12/03/2026
  • Local File Inclusion vulnerability
    <= 2.2.32
    17/04/2025
  • Local File Inclusion vulnerability
    <= 2.2.31
    27/03/2025
  • Local File Inclusion vulnerability
    <= 2.2.28
    07/08/2024
  • Local File Inclusion vulnerability
    <= 2.2.27
    05/07/2024
  • Authenticated (Contributor+) File inclusion via Shortcode vulnerability
    <= 2.2.25
    25/06/2024
  • Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode vulnerability
    <= 2.2.24
    31/05/2024
  • Unauthenticated Blind Server-Side Request Forgery vulnerability
    <= 2.2.23
    23/05/2024
  • Broken Access Control vulnerability
    <= 2.2.22
    15/11/2023

Vulnerability mitigation

  • Pricing
  • Application security (SCA)
  • RapidMitigate New
  • Threat Intelligence (API)
  • VS Monarx
  • VS Imunify360
  • VS Wordfence
  • Documentation
  • Service status
  • Log in

Code security

  • Managed VDP New
  • Active VDP directory 1,372
  • Report vulnerability
  • Security auditing
  • Compliance (CRA) New
  • Log in New

Bug bounty

  • Bug bounty
  • Leaderboard
  • Guidelines
  • Learn New
  • Report
  • Discord
  • Log in New

Use cases

  • Web developers
  • Webhosts New
  • Software vendors
  • WordPress
  • WooCommerce

Resources

  • Partners
  • Vulnerability database
  • Whitepaper 2026 New
  • Articles
  • Case studies New
  • Webinars New
  • Vulnerability statistics

Patchstack

  • About
  • Compliance New
  • Careers
  • Merch store
  • Media kit
  • LinkedIn
  • Facebook
  • X
© 2026 Patchstack
DPA
Privacy Policy
Accessibility
Terms & Conditions