The vulnerability identified as CVE-2026-32347 involves missing authorization checks in the raratheme Restaurant and Cafe plugin for WordPress, versions up to 1.2.5. This issue stems from improperly configured access control, which could allow unauthorized users to perform actions that should be restricted. The CVSS 3.1 base score is 5.3, indicating a medium severity level, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability loss. No patch or vendor advisory is currently provided, and no exploits are known in the wild.

The vulnerability does not compromise confidentiality or integrity but may lead to a loss of availability in the affected system. Since the attack vector is network-based and requires no privileges or user interaction, an attacker could potentially disrupt service availability remotely. However, no known exploits have been reported, and the impact is limited to availability degradation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently available, users should monitor vendor communications for updates. Until a fix is released, consider restricting access to the affected plugin features and applying compensating controls to limit exposure.