Privilege Escalation Vulnerability Affects Booking Package

CVE-2023-37389

What is CVE-2023-37389?

An improper privilege management vulnerability exists in the SAASPROJECT Booking Package, affecting various versions of the plugin. This flaw could allow malicious actors to escalate privileges without proper authentication. The affected versions include all prior to 1.5.98, posing significant risks for WordPress users and administrators if not addressed promptly. It is crucial for users to update their installations to the latest version to mitigate potential security threats.

References