CyberRota Analysis
AI-GeneratedThe WPCafe WordPress plugin prior to version 3.0.18 is vulnerable due to a lack of authorization checks in its REST API, enabling unauthenticated users to create reservations with any approval status. This flaw can lead to unauthorized submissions that bypass the administrator's moderation process, potentially disrupting site operations. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The WPCafe WordPress plugin before 3.0.18 does not perform an authorization check when creating a reservation through its REST API, verifying only a publicly available nonce, allowing unauthenticated users to submit reservations with an arbitrary approval status and bypass the administrator moderation workflow.