CVE-2023-36507 WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin: from n/a through 1.0.6...

CVE-2023-36507

Summary (CVE-2023-36507) : Affected software is the BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin for WordPress. The issue is an unauthenticated information disclosure in BookingPress versions up to and including 1.0.64, caused by exposure of sensitive server inf...

WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure

Software BookingPress Type Plugin Vulnerable versions = 1.0.64 Fixed in 1.0.65 OWASP Top 10 A5: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2023-36507 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID e634d3e6d42f Credits Paul Goodchild Required...