Deetronix Booking Ultra Pro Sensitive Data Exposure Vulnerability

A vulnerability allowing the retrieval of embedded sensitive data has been identified in the Deetronix Booking Ultra Pro WordPress plugin, affecting versions through 1.1.23. This issue arises from the unintentional inclusion of sensitive information in data sent from the application, which could be accessed by unauthorized users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information that is typically restricted, potentially allowing for further exploitation of other vulnerabilities within the system.

Remediation

Users are advised to update to a version of the Booking Ultra Pro WordPress plugin that is later than 1.1.23. For those using Patchstack, a mitigation rule has been issued to block attacks until an official fix is available.