Description
The Scheduling Plugin – Online Booking for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cbsb_disconnect_settings' function in all versions up to, and including, 3.5.10. This makes it possible for unauthenticated attackers to disconnect the plugin from the startbooking service and remove connection data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| startbooking | Scheduling Plugin – Online Booking for WordPress | ≤ 3.5.10 | — |