| Package | Affected versions | Patched versions |
|---|---|---|
| wpcafe | < 2.2.24 | 2.2.24 |
The WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.23 via the wpc_check_for_submission function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free