Arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System

• CVE-2026-11601 Medium 5.3 WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete 0.4%
• CVE-2026-75028 High 7.5 WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting 0.7%
• CVE-2026-11818 Medium 5.4 WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API 0.4%
• CVE-2024-5431 High 8.8 WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode 0.6%
• CVE-2024-5427 Medium 6.4 WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode 0.3%
• CVE-2024-1855 Medium 5.3 WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery 0.4%