BookingPress < 1.0.75 - Unauthenticated Booking Price Manipulation

2024-01-0500:00:00

wpscan.com

bookingpress

validation

appointment

software security

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Description The plugin does not have proper validation in its bookingpress_confirm_booking, allowing unauthenticated user to modify the price of an appointment

CPENameOperatorVersion
eq1.0.75

CPE	Name	Operator	Version
		eq	1.0.75

References

patchstack.com/database/vulnerability/bookingpress-appointment-booking/wordpress-bookingpress-plugin-1-0-74-booking-price-manipulation-vulnerability