CVE-2023-49758

Summary

CVE-2023-49758 is a Missing Authorization vulnerability affecting the Roland Murg WP Booking System from versions n/a through 2.0.19.2. Attackers can exploit this issue by manipulating incorrectly configured access control security levels, allowing unauthorized access and potential data compromise. The vulnerability can lead to serious consequences, including unintended modifications or disclosures of sensitive information. Users are strongly advised to update their WP Booking System plugins to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.