A missing authorization vulnerability exists in Arraytics WPCafe wp-cafe through version 3.0.22. This flaw allows attackers with limited privileges to exploit incorrectly configured access control security levels, potentially leading to unauthorized information disclosure and modification. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a medium severity impact primarily affecting confidentiality and integrity without impacting availability.