Missing Authorization Vulnerability Affects WP Time Slots Booking Form

CVE-2024-35735

Summary

A critical vulnerability exists in the WP Time Slots Booking Form by CodePeople due to missing authorization checks. This oversight can allow unauthorized users to access or manipulate functionalities intended for privileged users only. The issue adversely impacts versions from n/a up to 1.2.11, emphasizing the importance of employing strict access controls to safeguard against potential exploitation. Proper authorization mechanisms should be in place to protect sensitive data and ensure that only authorized individuals can perform critical actions within the application.

References