WordPress Bus Ticket Booking Plugin Broken Access Control Vulnerability Advisory

Vulnerability Overview Vulnerability Name: Broken Access Control vulnerability in WordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.9.7 Priority: Low CVSS Score: 5.3 (Medium) Description: This vulnerability allows attackers to access pages or perform actions they should not be able to, potentially leading to the exposure of other users' data. Scope of Impact Software: Bus Ticket Booking with Seat Reservation Version: <= 5.9.7 Vulnerability Type: Broken Access Control Affected Plugins: WordPress Plugins, Active WP Remediation Update Version: Update to version 5.9.8 or higher to fix this vulnerability. Automatic Update: Patchstack users can utilize the automatic update feature to automatically update the plugin. Detailed Information Reporter: A & Prow Team Report Date: 2024-08-28 Timeline Report Date: 2024-08-28 Additional Information How to Protect Your Website: Patchstack provides optimal protection. Vulnerability Discovery Method: How Patchstack discovered this vulnerability. Exploitation Method: How attackers can exploit this vulnerability. Website Already Compromised: Steps to take if your website has already been compromised. Summary This vulnerability affects WordPress Bus Ticket Booking with Seat Reservation plugin versions 5.9.7 and below, involving a Broken Access Control issue that may lead to data leakage. Users are advised to update to version 5.9.8 or higher to remediate this vulnerability. Patchstack users can leverage the automatic update feature to automatically update the plugin.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Bus Ticket Booking Plugin Broken Access Control Vulnerability Advisory

More from this source