Volerion logoVolerion
Volerion logoVolerion

Liquid Web / StellarWP BookIt Authentication Bypass Vulnerability Allowing Password Recovery

Vulnerability

An authentication bypass vulnerability has been identified in the Liquid Web / StellarWP BookIt plugin, specifically in versions prior to 2.5.4.1. This vulnerability allows for password recovery exploitation by bypassing authentication mechanisms.

Impact

Exploitation of this vulnerability could lead to unauthorized password recovery, allowing attackers to gain access to user accounts, potentially with administrative privileges.

Remediation

Users of the Liquid Web / StellarWP BookIt plugin should update to version 2.5.4.1 or later to address this vulnerability.

Added: Jun 2, 2026, 4:45 PM
Updated: Jun 2, 2026, 4:45 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
7.4
remediation
0.0
relevance
9.8
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.