medium6.5
CVE-2025-12685
The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers.
Impact
The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could allow an unauthenticated attacker to delete any customer through a CSRF attack.
Affected products
| Product | Affected versions |
|---|---|
| WPBookit WordPress Plugin | through 1.0.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.