Restaurant & Cafe Addon for Elementor, 5bceb74e-6c16-4b62-9194-429edde484bc
- CVE, Research URL
- Application
- Published on
- -
- Research Description
- Restaurant & Cafe Addon for Elementor [restaurant-cafe-addon-for-elementor] < 1.5.3 Restaurant & Cafe Addon for Elementor < 1.5.3 - Missing Authorization The plugin is vulnerable to unauthorized modification of data due to missing capability checks on the rcafe_bw_settings_save_func(), rctl_bw_toggle_submit_func(), rcafe_uw_settings_save_func(), and rctl_uw_toggle_submit_func() functions all hooked via nopriv AJAX actions in all versions up to, and including, 1.5.2. This makes it possible for unauthenticated attackers to modify the plugin's settings.
- Affected versions
-
max 1.5.3.
- Status
-
vulnerable