CVE-2024-12274 — BookingPress < 1.1.23 - Unauthenticated Export File Download
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guess…
Published: 2025-01-13 · CVSS: 7.5 · CVSS 3.1
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7