CVE-2026-103423 | CVSS: 7.5 | 严重级别: HIGH
The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to retrieve personally identifiable information for every booked customer stored in the booking_package_booked_customers table, including names, email addresses, phone numbers, physical addresses, and cancellation tokens. The nonce nominally protecting the endpoint is a public CSRF token emitted in the localized booking_pack
参考链接:
• https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/index.php
• https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/index.php
• https://plugins.trac.wordpress.org/browser/booking-package/tags/1.7.29/lib/Sched
📌 数据来源: NVD 官方