Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin WPCafe-Online Food Ordering Restaurant Menu Delivery and Reservations for WooCommerce Server-Side Request Forgery - CVE-2024-1855 - Vulnerability Database
WP Plugin Wp Cafe

WordPress Plugin WPCafe-Online Food Ordering Restaurant Menu Delivery and Reservations for WooCommerce Server-Side Request Forgery - CVE-2024-1855

Medium
Reference: CVE-2024-1855
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-1855
Title: WordPress Plugin WPCafe-Online Food Ordering Restaurant Menu Delivery and Reservations for WooCommerce Server-Side Request Forgery
Overview:

WordPress Plugin WPCafe-Online Food Ordering Restaurant Menu Delivery and Reservations for WooCommerce is prone to a server-side request forgery vulnerability. An attacker may leverage this issue to make the vulnerable server perform port scanning of hosts in internal or external networks other attacks are also possible. WordPress Plugin WPCafe-Online Food Ordering Restaurant Menu Delivery and Reservations for WooCommerce version 2.2.23 is vulnerable prior versions may also be affected.