Description
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress is prone to an arbitrary file creation vulnerability. Exploiting this issue may allow attackers to create arbitrary files populated with content of files from local or remote sources, allowing the execution of any PHP code in those files, or the exposure of sensitive information. WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress version 1.1.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.6 or latest