| Package | Affected versions | Patched versions |
|---|---|---|
| bookingpress | < 1.0.31 | 1.0.31 |
The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in it's thank you page, allowing any visitor to display information about any booking, including full name, date, time and service booked, by manipulating the appointment_id query parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free