Description
The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting its premium subscription state, allowing unauthenticated attackers to disable the Booking Package WordPress plugin before 1.7.31's paid features.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Booking Package | < 1.7.31 | 1.7.31 |
References
- https://wpscan.com/vulnerability/feb9d9bd-7192-4c75-9dc4-43d925518dc1/ exploit vdb-entry technical-description