Description
WordPress Plugin Booking calendar, Appointment Booking System is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently manipulate the parameter values to change data such as prices. WordPress Plugin Booking calendar, Appointment Booking System version 2.2.2 is vulnerable; prior versions may also be affected.
Remediation
Disable the plugin until a fix is available