CVE-2024-12558 WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db

🗓️ 21 Dec 2024 09:23:54Reported by WordfenceType

Vulnerability in WP BASE Booking allows authenticated access to sensitive data due to missing checks.

Reporter	Title	Published	Views	Family All 10
GithubExploit	Exploit for CVE-2024-12558	11 Jan 202502:50	–	githubexploit
Circl	CVE-2024-12558	21 Dec 202409:42	–	circl
CNNVD	WordPress plugin WP BASE Booking of Appointments, Services and Events 安全漏洞	21 Dec 202400:00	–	cnnvd
CVE	CVE-2024-12558	21 Dec 202409:23	–	cve
NVD	CVE-2024-12558	21 Dec 202410:15	–	nvd
Patchstack	WordPress WP BASE Booking plugin <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db vulnerability	20 Dec 202421:10	–	patchstack
Positive Technologies	PT-2024-17653 · WordPress · Wp Base Booking Of Appointments	21 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12558	23 May 202507:58	–	redhatcve
Vulnrichment	CVE-2024-12558 WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db	21 Dec 202409:23	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)	9 Jan 202514:35	–	wordfence

[
  {
    "vendor": "puckrobin",
    "product": "WP BASE Booking of Appointments, Services and Events",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.9.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3210164/wp-base-booking-of-appointments-services-and-events/tags/5.0.0/includes/freeons/export-import.php
plugins	www.plugins.trac.wordpress.org/browser/wp-base-booking-of-appointments-services-and-events/tags/4.9.2/includes/freeons/export-import.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/09831b2f-8f79-4833-8fc6-f1af56c6abc8

08 Apr 2026 16:34Current

CVSS 3.16.5

EPSS0.3695

CWE-862