CVE-2026-11818

Name of the Vulnerable Software and Affected Versions WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System versions prior to 3.0.15

Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated users with subscriber-level access or higher can list, create, update, delete, clone, and bulk-delete notification flow workflows intended for administrator management. The only existing protection on these endpoints is a wp rest nonce check, which any logged-in user can obtain from the frontend page source.

Recommendations Update the plugin to a version newer than 3.0.14.