Restaurant & Cafe Addon for Elementor

Restaurant & Cafe Addon for Elementor has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 9 are fixed as of October 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (44%). Other recurring categories include Missing Authorization, Authorization Bypass Through User-Controlled Key.

Every one of the 9 issues recorded for Restaurant & Cafe Addon for Elementor has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (3) reported by João Pedro Soares de Alcântara.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Restaurant & Cafe Addon for Elementor vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-54316

Restaurant & Cafe Addon for Elementor <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

9 records


2026-04-30 17:17	Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Restaurant & Cafe Addon for Elementor <= 1.5.8	`CVE-2024-13362`	6.1 Medium	Asaf Mozes	Yes
2024-12-11 00:00	Restaurant & Cafe Addon for Elementor <= 1.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Restaurant & Cafe Addon for Elementor <= 1.5.8	`CVE-2024-54316`	6.4 Medium	João Pedro Soares de Alcântara	Yes
2024-11-27 00:00	Restaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure Restaurant & Cafe Addon for Elementor <= 1.5.9	`CVE-2024-10780`	4.3 Medium	Francesco Carlucci	Yes
2024-10-31 00:00	Restaurant & Cafe Addon for Elementor <= 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Restaurant & Cafe Addon for Elementor <= 1.5.6	`CVE-2024-51581`	6.4 Medium	João Pedro Soares de Alcântara	Yes
2024-09-24 00:00	Restaurant & Cafe Addon for Elementor <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Restaurant & Cafe Addon for Elementor <= 1.5.5	`CVE-2024-44032`	6.4 Medium	João Pedro Soares de Alcântara	Yes
2023-11-16 00:00	Restaurant & Cafe Addon for Elementor <= 1.5.3 - Missing Authorization via multiple AJAX functions Restaurant & Cafe Addon for Elementor <= 1.5.3	`CVE-2023-47826`	3.1 Low	Abdi Pranata	Yes
2023-11-14 00:00	Restaurant & Cafe Addon for Elementor <= 1.5.2 - Missing Authorization Restaurant & Cafe Addon for Elementor <= 1.5.2	`N/A`	5.3 Medium	Anonymous	Yes
2023-11-14 00:00	Restaurant & Cafe Addon for Elementor <= 1.5.2 - Cross-Site Request Forgery Restaurant & Cafe Addon for Elementor <= 1.5.2	`N/A`	4.3 Medium	Anonymous	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Restaurant & Cafe Addon for Elementor < 1.4.6	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–9 of 9 reports