Pinpoint Booking System SQL Injection Vulnerability affects WordPress Booking Plugin

CVE-2024-7112

What is CVE-2024-7112?

The Pinpoint Booking System plugin for WordPress is susceptible to SQL Injection due to inadequate parameter escaping in the 'schedule' parameter. This vulnerability, present in all versions through 2.9.9.5.0, allows authenticated attackers with Subscriber-level access or higher to modify existing SQL queries by injecting additional commands. This capability can lead to unauthorized retrieval of sensitive information from the database, posing a significant risk to site integrity and user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References