WordPress DesignThemes Reservation Plugin Missing Authorization Vulnerability Allowing Access Control Bypass

A missing authorization vulnerability has been identified in the WordPress DesignThemes Reservation Plugin, specifically in versions through 1.7. This vulnerability allows for the exploitation of improperly configured access control, enabling unauthorized users to change settings or access restricted features.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in plugin settings, potentially allowing attackers to manipulate reservation data or other related functionalities.

Remediation

Users are advised to update to a version of the WordPress DesignThemes Reservation Plugin later than 1.7. For those unable to update, Patchstack offers a mitigation rule to block attacks until an official fix can be applied.