Access Control Weakness in WPBookit Pro by iqonicdesign
CVE-2026-25415

Currently unrated

Key Information:

Vendor

WordPress

Vendor
CVE Published:
19 February 2026

What is CVE-2026-25415?

The WPBookit Pro plugin by iqonicdesign suffers from a missing authorization vulnerability that enables attackers to exploit incorrectly configured access control settings. This flaw affects versions of the plugin up to and including 1.6.18, potentially allowing unauthorized access to sensitive functionalities within the plugin. Users are encouraged to review their access control implementations and update their installations to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

WPBookit Pro <= n/a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phat RiO | Patchstack Bug Bounty Program
.