Vulnerabilities > CVE-2024-1634 - Missing Authorization vulnerability in Startbooking Scheduling Plugin - Online Booking
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
LOW Availability impact
LOW Summary
The Scheduling Plugin – Online Booking for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cbsb_disconnect_settings' function in all versions up to, and including, 3.5.10. This makes it possible for unauthenticated attackers to disconnect the plugin from the startbooking service and remove connection data.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |