Missing Authorization Vulnerability Affects WP Hotel Booking

CVE-2024-30508

Summary

A missing authorization vulnerability has been identified in the WP Hotel Booking plugin developed by ThimPress. This flaw allows unauthorized users to gain access to restricted areas of the hotel booking system, potentially leading to the manipulation of bookings or extraction of sensitive information. The issue impacts all versions of the plugin up to and including 2.0.9.2. It is crucial for users to implement patches or upgrades to secure their systems against potential exploitation.

References