WeDesignTech Ultimate Booking Addon Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the WeDesignTech Ultimate Booking Addon for WordPress, specifically in versions through 1.0.1. This vulnerability allows for authentication abuse, potentially enabling unauthorized users to perform actions reserved for higher-privileged users, such as gaining admin access to the website.

Impact

Exploitation of this vulnerability could lead to unauthorized access and actions on behalf of a user with higher privileges, including administrative rights.

Remediation

Users are advised to mitigate this vulnerability immediately. Patchstack has issued a mitigation rule to block attacks until an official patch is available. For more information on how to apply this mitigation, visit the Patchstack website.