PRODUCT PROFILE

bookit

Created from vulnerability 18216 relation agent

wordpress

关联漏洞

共找到 1 条公开漏洞记录

高危CVE-2025-128412026/06/25

WordPress Bookit < 2.5.1 - Unauthenticated Stripe Settings Update

Bookit WordPress plugin < 2.5.1 contains a broken access control vulnerability caused by a publicly accessible REST endpoint allowing unauthenticated update of Stripe payment options, letting remote attackers modify payment settings without authentication.

bookitPoC 已收录

CVSS—