CVE-2025-12685

The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could allow an unauthenticated attacker to delete any customer through a CSRF attack...

WordPress WPBookit plugin <= 1.0.7 - Customer Deletion via CSRF vulnerability

Customer Deletion via CSRF vulnerability discovered by Drtime in WordPress Plugin WPBookit versions = 1.0.7...

CVE-2025-12685

The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could allow an unauthenticated attacker to delete any customer through a CSRF attack...

CVE-2025-12685

The WPBookit WordPress plugin, in versions through 1.0.7 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF token validation during the customer deletion operation. This flaw allows an unauthenticated attacker to delete any customer record. Remediation...