WordPress Booking Package plugin <= 1.7.06 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Skoobi in WordPress Plugin Booking Package versions = 1.7.06...