Access Control Weakness in WPBookit Pro by iqonicdesign
CVE-2026-25415
Currently unrated
What is CVE-2026-25415?
The WPBookit Pro plugin by iqonicdesign suffers from a missing authorization vulnerability that enables attackers to exploit incorrectly configured access control settings. This flaw affects versions of the plugin up to and including 1.6.18, potentially allowing unauthorized access to sensitive functionalities within the plugin. Users are encouraged to review their access control implementations and update their installations to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
WPBookit Pro <= n/a
References
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Phat RiO | Patchstack Bug Bounty Program