Exploit for CVE-2024-12558

🗓️ 11 Jan 2025 02:50:14Reported by NxploitedType

githubexploit

githubexploit🔗 github.com👁 247 Views

WordPress plugin WP BASE Booking allows unauthorized data access for authenticated users up to version 4.9.2.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-12558	21 Dec 202409:42	–	circl
CNNVD	WordPress plugin WP BASE Booking of Appointments, Services and Events 安全漏洞	21 Dec 202400:00	–	cnnvd
CVE	CVE-2024-12558	21 Dec 202409:23	–	cve
Cvelist	CVE-2024-12558 WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db	21 Dec 202409:23	–	cvelist
NVD	CVE-2024-12558	21 Dec 202410:15	–	nvd
Patchstack	WordPress WP BASE Booking plugin <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db vulnerability	20 Dec 202421:10	–	patchstack
Positive Technologies	PT-2024-17653 · WordPress · Wp Base Booking Of Appointments	21 Dec 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-12558	23 May 202507:58	–	redhatcve
Vulnrichment	CVE-2024-12558 WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db	21 Dec 202409:23	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)	9 Jan 202514:35	–	wordfence

11 Jan 2025 05:05Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5

EPSS0.3695

SSVC

wordpress plugin vulnerability unauthorized data access cve-2024-12558 export_db function authenticated users.