Medium · 6.3 CVE-2024-54252 EUVD-2024-52378GHSA-75c8-99jx-256c

WordPress Pinpoint Booking System Plugin <= 2.9.9.5.7 - Broken Access Control vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: dotonpaper Product: Pinpoint Booking System

Description

Missing Authorization vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinpoint Booking System: from n/a through <= 2.9.9.5.7.

Affected products

Vendor	Product	Affected	Fixed
DOTonPAPER	Pinpoint Booking System	≤ 2.9.9.5.7	—

References

https://patchstack.com/database/Wordpress/Plugin/booking-system/vulnerability/wordpress-pinpoint-booking-system-plugin-2-9-9-5-2-broken-access-control-vulnerability?_s_id=cve vdb-entry