WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.12 - Broken Access Control vulnerability

CVE-2023-32601

What is CVE-2023-32601?

A vulnerability in the Booking Ultra Pro plugin has been identified due to missing authorization features, enabling attackers to exploit incorrectly configured access control security levels. This flaw impacts multiple versions of the plugin, allowing unauthorized users to gain access to restricted areas or functionalities. Users are advised to review their access controls and update to the latest version to mitigate this issue.

References