CVE-2024-2441

2024-05-1415:19:20

[email protected]

web.nvd.nist.gov

cve-2024-2441

vikbooking

wordpress plugin

security bypass

authorization

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8’s they shouldn’t be allowed to.