CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Murg WP Booking System wp-booking-system.This issue affects WP Booking System: from n/a through <= 2.0.19.10.
Explanation of Vulnerability in Simple Terms
WP Booking System versions up to 2.0.19.10 contain an exposure of sensitive information vulnerability. An authenticated user with low privileges can read data they should not have access to, such as booking details or system configuration. The vulnerability requires a valid login but no additional user interaction. Update to a version newer than 2.0.19.10.
What an attacker can do
Read sensitive booking data and system information they should not have access to.
Potential impact on your site
Booking details, customer information, or plugin configuration may be exposed to authenticated users.
Conditions required to exploit
Attacker must have a valid low-privilege account on the WordPress site.
Key dates
External resources
Related vulnerabilities
