CVE-2025-15473

The Timetics WordPress plugin, in versions prior to 1.0.52 , is vulnerable to an authorization bypass in a REST endpoint . This flaw allows unauthenticated users to arbitrarily modify the payment status and post status of the "timetics-booking " custom post type. No specific remediation or exploi...