WordPress Appointment Booking Calendar and Scheduling Plugin Unauthenticated Export Vulnerability

A vulnerability exists in the Appointment Booking Calendar and Scheduling WordPress plugins, prior to version 1.1.23, allowing unauthenticated attackers to access exported settings files. The plugins export data to a public directory using an easily guessable file name, potentially exposing sensitive information if the exported files are present.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive data, depending on what information was exported by the plugin.

Remediation

Users are advised to update the Appointment Booking Calendar and Scheduling WordPress plugins to version 1.1.23 or later.