Description
WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress is prone to a insecure direct object reference (IDOR) vulnerability. Exploiting this issue may allow an attacker to view information about any booking, including full name, date, time and service booked. WordPress Plugin Appointment Booking Calendar and Online Scheduling-BookingPress version 1.0.30 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.0.31 or latest
References
Related Vulnerabilities
WordPress 3.8.x Denial of Service Vulnerability (3.8 - 3.8.25)
Oracle Application Server CVE-2006-0273 Vulnerability (CVE-2006-0273)
Atlassian Confluence Missing Authorization Vulnerability (CVE-2019-15005)
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-12459)
WordPress Plugin Mang Board WP Unspecified Vulnerability (2.0.5)