CVE-2026-66587

WP Cafe Pro versions prior to 3.0.15 are vulnerable to an unauthenticated Local File Inclusion (LFI) flaw, allowing attackers to access sensitive files on the server. This critical vulnerability, rated 9.8 on the CVSS scale, poses a significant risk of data exposure and potential system compromise. Organizations using affected versions should prioritize immediate patching to mitigate the threat.