WordPress WPBookit Pro plugin <= 1.6.18 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO in WordPress Plugin WPBookit Pro versions = 1.6.18...