Roland Murg WP Booking System Sensitive Data Exposure Vulnerability

A vulnerability allowing the exposure of sensitive information has been identified in the WP Booking System plugin by Roland Murg, affecting versions through 2.0.19.12. This issue allows unauthorized retrieval of embedded sensitive data that is not typically accessible to regular users.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, potentially allowing for further exploitation of other weaknesses within the system.

Remediation

Users of the WP Booking System plugin should update to version 2.0.19.13 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.