Description
WordPress Plugin Booking calendar, Appointment Booking System is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently manipulate the parameter values to change data such as prices. WordPress Plugin Booking calendar, Appointment Booking System version 2.2.2 is vulnerable; prior versions may also be affected.
Remediation
Disable the plugin until a fix is available
References
Related Vulnerabilities
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0211)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-29211)
WordPress Plugin Wallable-Social Networking Arbitrary File Upload (1.1)
WordPress Plugin Goolytics-Simple Google Analytics Cross-Site Scripting (1.1.1)
WordPress Plugin Localize My Post Local File Inclusion (1.0)