5.3
Moyenne
CVE-2025-12841 The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of…
Description
The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Bookit 2.5 | premières → < 2.5.1 | 2.5.1 |