cleantalk
Vulnerabilities and Security Researches

Vulnerabilities and security researches forbooking-x booking-x

Direction: ascending
Jul 04, 2025

Booking X – Appointment and Reservation Availability Calendar # CVE-2025-6814

CVE, Research URL

CVE-2025-6814

Home page URL

Security reports for Booking X – Appointment and Reservation Availability Calendar

Application

Booking X – Appointment and Reservation Availability Calendar

Date
Jul 04, 2025
Research Description
The Booking X plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_now() function in versions 1.0 to 1.1.2. This makes it possible for unauthenticated attackers to download all plugin data, including user accounts, user meta, and PayPal credentials, by issuing a crafted POST request.
Affected versions
Min -, max -.
Status
vulnerable