CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
WeDesignTech Ultimate Booking Addon versions 1.0.1 and earlier contain an authentication bypass vulnerability. An attacker can exploit weak or missing authentication mechanisms to gain unauthorized access to the booking system without valid credentials. This allows complete compromise of the addon's functionality, including reading, modifying, or deleting booking data. Immediate patching is required.
What an attacker can do
Bypass authentication and gain full control over the booking addon without valid credentials.
Potential impact on your site
Attackers can read, modify, or delete all booking data and potentially access sensitive customer information.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
