CVE Catalog
CVE-2026-66586
MediumCVSS 6.6Summary
Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.
Risk Assessment
The risk includes the possibility of reading local files on the server, potentially leading to sensitive data leakage or further attack escalation.
Recommendation
It is recommended to update WP Cafe Pro to version 3.0.15 or later and restrict author permissions to the necessary minimum.
Other vulnerabilities in WP Cafe Pro
See all- CVE-2026-66585High
Unauthenticated Sensitive Data Exposure in WP Cafe Pro versions before 3.0.15. Allows access to confidential information without authentication.
- CVE-2026-66587Critical
Unauthenticated Local File Inclusion in WP Cafe Pro versions before 3.0.15. An attacker can read arbitrary files from the server.
Original NVD description (English source)
Author Local File Inclusion in WP Cafe Pro < 3.0.15 versions.