Arraytics WPCafe vulnerabilities

Latest Arraytics WPCafe CVEs

Newest publication first

1. CVE-2026-57622 WordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerability

   Published 2026-06-26

   Medium·CVSS 4.3

   Subscriber Broken Access Control in WPCafe <= 3.0.14 versions.

2. CVE-2026-27071 WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability

   Published 2026-03-25

   Critical·CVSS 9.1

   Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 3.0.7.

3. CVE-2023-47805 WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability

   Published 2024-12-09

   Medium·CVSS 5.3

   Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 2.2.22.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.