Booking X WordPress Plugin Data Exposure Vulnerability

A vulnerability in the Booking X plugin for WordPress, affecting versions 1.0 to 1.1.2, allows unauthenticated users to access sensitive data. This issue arises from a lack of proper capability checks in the 'export_now()' function, which enables unauthorized individuals to download plugin data, including user accounts, user metadata, and PayPal credentials, by sending a crafted POST request.

Impact

Exploitation of this vulnerability leads to unauthorized access and download of sensitive information, including user accounts, user meta, and PayPal credentials.

Reproduction

To reproduce this vulnerability, send a POST request to the WordPress site with the 'export_xml' parameter set to 'Export xml'. This request can be made using tools like cURL or Postman, or through a custom script that targets the vulnerable WordPress site.