WeDesignTech Ultimate Booking Addon Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the WeDesignTech Ultimate Booking Addon for WordPress, affecting versions through 1.0.1. This vulnerability allows unauthorized users to bypass authentication mechanisms, potentially leading to actions that should only be available to users with higher privileges, such as gaining administrative access to the website.

Impact

Exploitation of this vulnerability could allow an attacker to bypass authentication and gain administrative privileges on the affected WordPress site.

Remediation

Users are advised to update to the latest version of the WeDesignTech Ultimate Booking Addon. For those using Patchstack, a mitigation rule is available to block attacks until an official patch can be safely applied.