Description
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress is prone to a insecure direct object reference (IDOR) vulnerability. Exploiting this issue may allow an attacker to view information about any booking, including full name, date, time and service booked. WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress version 1.0.30 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.31 or latest
References
Related Vulnerabilities
phpMyFAQ Other Vulnerability (CVE-2005-3050)
WordPress Plugin Apptivo eCommerce Multiple Cross-Site Scripting Vulnerabilities (1.1.5)
MySQL CVE-2012-1690 Vulnerability (CVE-2012-1690)
WordPress Plugin Appointment Booking Calendar Multiple Vulnerabilities (1.1.7)
Joomla Improper Input Validation Vulnerability (CVE-2016-8870)