Description
The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission against the capacity configured for its own slot, allowing unauthenticated visitors to take slots that are already fully booked.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Appointment Hour Booking | < 1.5.95 | 1.5.95 |
References
- https://wpscan.com/vulnerability/b7b45dae-bc91-4142-ae9b-5c8b39791cda/ exploit vdb-entry technical-description