The WP FEvents Book WordPress plugin through 0.46 does not ensures that bookings to be updated belong to the user making the request, allowing any authenticated user to book, add notes, or cancel booking on behalf of other users.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp Fevents Book Plugin | — | Update wp-fevents-book plugin to version 0.47, or a newer patched version | May 15, 2025 | Apr 3, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub