Restaurant & Cafe Addon for Elementor, f3d59459193c15db9b30cf501e6999ea8588d35f
- CVE, Research URL
- Application
- Published on
- Nov 14, 2023
- Research Description
- Restaurant & Cafe Addon for Elementor [restaurant-cafe-addon-for-elementor] < 1.5.3 Restaurant & Cafe Addon for Elementor <= 1.5.2 - Missing Authorization The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the rcafe_bw_settings_save_func(), rctl_bw_toggle_submit_func(), rcafe_uw_settings_save_func(), and rctl_uw_toggle_submit_func() functions all hooked via nopriv AJAX actions in all versions up to, and including, 1.5.2. This makes it possible for unauthenticated attackers to modify the plugin's settings.
- Affected versions
-
max 1.5.3.
- Status
-
vulnerable