CVE Catalog
CVE-2026-66587
CriticalCVSS 9.8Summary
Unauthenticated Local File Inclusion in WP Cafe Pro versions before 3.0.15. An attacker can read arbitrary files from the server.
Risk Assessment
Risk of exposure of sensitive data such as configuration files or user data.
Recommendation
Update WP Cafe Pro to version 3.0.15 or later.
Original NVD description (English source)
Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions.