The Restaurant & Cafe Addon for Elementor plugin for WordPress had a security issue which allowed unauthenticated attackers to modify the plugin’s settings, in all versions up to, and including, 1.5.2. This was because the plugin was missing capability checks on certain functions.