WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System (<= 3.0.18)

The WPCafe WordPress plugin contains a local file inclusion vulnerability in its template scope function, allowing authenticated contributors to execute arbitrary PHP files.