Critical · published August 8, 2024
🚨 An authentication bypass in the BookingPress plugin could let attackers waltz right in as any user, including admins! 🔥 This is like a hotel that hands out room keys to anyone who knows a guest's name—no ID check required! Just one booking and they could be in your suite stealing everything in sight. An attacker could exploit this vulnerability to log in as any registered user, potentially gaining access to sensitive admin functions. This could lead to unauthorized changes, data breaches, or even complete site takeover. The implications are absolutely devastating, especially for site security and user trust!
This is like a hotel that hands out room keys to anyone who knows a guest's name—no ID check required! Just one booking and they could be in your suite stealing everything in sight. The BookingPress plugin fails to properly verify a user's identity during the booking process, allowing unauthenticated attackers to log in as legitimate users if they have access to the user's email. This occurs primarily when the 'Auto login user after successful booking' feature is enabled, making it a critical exposure.
An attacker could exploit this vulnerability to log in as any registered user, potentially gaining access to sensitive admin functions. This could lead to unauthorized changes, data breaches, or even complete site takeover. The implications are absolutely devastating, especially for site security and user trust! To resolve this issue, update the BookingPress plugin to version 1.1.8 or later immediately. Additionally, review the settings to disable 'Auto login user after successful booking' until the update is applied. It's crucial to educate your users about safeguarding their email addresses, too! You've got this! Follow these steps and you'll be back in the security game in no time! 🛡️