WPBookit Plugin Privilege Escalation Vulnerability via Email Update

A privilege escalation vulnerability allowing account takeover has been identified in the WPBookit plugin for WordPress, affecting all versions through 1.0.2. The issue arises because the plugin fails to properly verify a user's identity before allowing changes to be made to user details, such as email addresses, in the edit_newdata_customer_callback() function. This vulnerability enables unauthenticated attackers to alter the email addresses of any user, including administrators. Once the email is changed, the attacker can reset the user's password and gain access to their account.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling attackers to gain access to user accounts, including those of administrators.

Remediation

Users are advised to update the WPBookit plugin to version 1.0.3 or a newer patched version.