Description
The Bookster WordPress plugin through 1.1.0 allows adding sensitive parameters when validating appointments allowing attackers to manipulate the data sent when booking an appointment (the request body) to change its status from pending to approved.
Published: 2024-06-26
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 May 2025 21:30:00 +0000

Type Values Removed Values Added
First Time appeared Wpbookster
Wpbookster bookster
CPEs cpe:2.3:a:wpbookster:bookster:*:*:*:*:*:wordpress:*:*
Vendors & Products Wpbookster
Wpbookster bookster

Mon, 28 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-863
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Wpbookster Bookster
cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published:

Updated: 2024-10-28T20:13:18.059Z

Reserved: 2024-05-17T14:55:43.858Z

Link: CVE-2024-5071

cve-icon Vulnrichment

Updated: 2024-08-01T21:03:10.655Z

cve-icon NVD

Status : Analyzed

Published: 2024-06-26T06:15:16.463

Modified: 2025-05-19T21:02:30.093

Link: CVE-2024-5071

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses