WPBookit WordPress Plugin Cross-Site Request Forgery Vulnerability Allowing Customer Deletion

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WPBookit WordPress plugin, affecting versions through 1.0.7. The vulnerability arises because the plugin does not implement a CSRF check when customers are deleted. This flaw could enable an unauthenticated attacker to delete any customer by exploiting the absence of CSRF protection.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of customers from the WordPress site.

Reproduction

To reproduce this vulnerability, send a POST request to 'wp-admin/admin-ajax.php' with the action 'wpb_ajax_post', the route name 'delete_customer', and the ID of the user to be deleted. The absence of a CSRF nonce check allows this request to be processed, resulting in the deletion of the specified customer.