WPCafe vulnerabilities

Products

• WP Cafe Pro 2

Latest WPCafe CVEs

Newest publication first

1. CVE-2026-66585 WordPress WP Cafe Pro plugin < 3.0.15 - Sensitive Data Exposure vulnerability

   Published 2026-08-24

   High·CVSS 7.5 EPSS 0.42%

   Unauthenticated Sensitive Data Exposure in WP Cafe Pro < 3.0.15 versions.

2. CVE-2026-66587 WordPress WP Cafe Pro plugin < 3.0.15 - Local File Inclusion vulnerability

   Published 2026-08-24

   Critical·CVSS 9.8 EPSS 0.50%

   Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.