https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-47805.htmlhttps://patchthecve.com/cve/CVE-2023-47805.htmlWed, 17 Jun 2026 06:33:18 +0000MEDIUM 5.3: Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 2.2.22.https://patchthecve.com/cve/CVE-2024-43135.htmlhttps://patchthecve.com/cve/CVE-2024-43135.htmlWed, 17 Jun 2026 07:50:30 +0000HIGH 7.5: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through 2.2.28.https://patchthecve.com/cve/CVE-2024-37513.htmlhttps://patchthecve.com/cve/CVE-2024-37513.htmlWed, 17 Jun 2026 07:38:30 +0000HIGH 8.5: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows Path Traversal.This issue affects WPCafe: from n/a through 2.2.27.https://patchthecve.com/cve/CVE-2024-5431.htmlhttps://patchthecve.com/cve/CVE-2024-5431.htmlWed, 17 Jun 2026 08:15:56 +0000HIGH 8.8: The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.25 via the reservation_extra_field shortcode parameter. This makes it possible for authenticated attacke