CVE-2025-12841

The Bookit WordPress plugin (versions prior to 2.5.1 ) contains a broken access control vulnerability. A publicly accessible REST endpoint allows unauthenticated updates to the plugin's Stripe payment options . Remote attackers can exploit this to modify payment settings without authentication, w...

PT-2025-50919

Name of the Vulnerable Software and Affected Versions Bookit WordPress plugin versions prior to 2.5.1 Description The Bookit WordPress plugin contains a publicly accessible REST endpoint that allows unauthenticated modification of the plugin's Stripe payment settings. This allows attackers to alt...

WordPress Plugin Bookit security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

CVE-2025-12841: Undefined Security Weakness

The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options...