A vulnerability described as critical has been identified in arraytics WPCafe Plugin up to 3.0.14. Impacted is an unknown function of the component Notification Flow Workflows. The manipulation results in authorization bypass.
This vulnerability is reported as CVE-2026-11818. The attack can be launched remotely. No exploit exists.