PT-2024-38281 · WordPress · Bookingpress

Gibran Abdillah · Published 2024-08-08 · Updated 2024-08-12 · CVE-2024-7350

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BookingPress plugin for WordPress versions 1.1.6 through 1.1.7

Description The issue is related to authentication bypass due to the plugin not properly verifying a user's identity prior to logging them in when completing a booking. This allows unauthenticated attackers to log in as registered users, including administrators, if they have access to that user's email. The exploitation is only possible when the 'Auto login user after successful booking' setting is enabled.

Recommendations For versions 1.1.6 through 1.1.7, consider disabling the 'Auto login user after successful booking' setting to prevent exploitation until a patch is available. As a temporary workaround, restrict access to the booking feature to minimize the risk of unauthorized logins. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2024-7350

Affected Products

Bookingpress

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-7350 · Security Note
• https://t.me/cvedetector/2747 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/3130266/bookingpress-appointment-booking/trunk/core/classes/class.bookingpress_customers.php · Note
• https://t.me/cvenotify/89862 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/4c367565-75f7-4dd7-a2f1-111df581bd7a?source=cve · Note
• https://twitter.com/cracbot/status/1823238104838521275 · Twitter Post
• https://plugins.trac.wordpress.org/browser/bookingpress-appointment-booking/trunk/core/classes/class.bookingpress_customers.php#L339 · Note