CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant & Cafe Addon for Elementor: from n/a through 1.5.3.
Explanation of Vulnerability in Simple Terms
The Restaurant & Cafe Addon for Elementor does not properly check user permissions before allowing changes to restaurant data. An attacker on the network can modify or delete restaurant information without authentication. This affects versions up to 1.5.3. Site owners should update to a version newer than 1.5.3 to prevent unauthorized data tampering.
What an attacker can do
Modify or delete restaurant data without logging in.
Potential impact on your site
Restaurant menu, hours, contact info, or other addon data can be altered or removed by anyone.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
