PT-2023-13488 · WordPress · Booked - Appointment Booking For Wordpress

Coogee86 · Published 2023-12-28 · Updated 2024-01-04 · CVE-2022-36399

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Booked - Appointment Booking for WordPress | Calendars versions prior to 2.4.4

Description The issue is related to the exposure of sensitive information to an unauthorized actor. This can potentially lead to unauthorized access to confidential data.

Recommendations For versions prior to 2.4.4, update to version 2.4.4 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-36399

Affected Products

Booked - Appointment Booking For Wordpress

References · 5

• https://osv.dev/vulnerability/CVE-2022-36399 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36399 · Security Note
• https://patchstack.com/database/vulnerability/booked/wordpress-booked-plugin-2-4-unauth-appointment-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1740496367749845336 · Twitter Post
• https://t.me/cvenotify/65526 · Telegram Post