Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin Booking Calendar-Appointment Booking-BookIt Security Bypass - CVE-2023-2834 - Vulnerability Database
WP Plugin Bookit

WordPress Plugin Booking Calendar-Appointment Booking-BookIt Security Bypass - CVE-2023-2834

Critical
Reference: CVE-2023-2834
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-2834
Title: WordPress Plugin Booking Calendar-Appointment Booking-BookIt Security Bypass
Overview:

WordPress Plugin Booking Calendar-Appointment Booking-BookIt is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently log in as any existing user on the site including administrator if they have access to the email. WordPress Plugin Booking Calendar-Appointment Booking-BookIt version 2.3.7 is vulnerable prior versions may also be affected.