medium5.3
CVE-2025-12841
The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options.
Impact
The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options.
Affected products
| Product | Affected versions |
|---|---|
| Bookit WordPress Plugin | before 2.5.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.