CVE-2025-10124 — Booking Manager < 2.1.15 - Contributor+ Booking Deletion
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privilege…
Published: 2025-10-10 · CVSS: 4.5 · CVSS 3.1
The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor and above privileges. When a page containing the shortcode is visited, the bookings are deleted.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7