CVE-2022-36399 — WordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposure

CVE-2022-36399

WordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposure PUBLISHED

Description (CNA)

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BoxyStudio Booked - Appointment Booking for WordPress | Calendars.This issue affects Booked - Appointment Booking for WordPress | Calendars: from n/a before 2.4.4.

Affected (CNA)

Vendor / product	Versions
BoxyStudio / Booked - Appointment Booking for WordPress \| Calendars	affected n/a before 2.4.4

CWE

CWE-200

References

https://patchstack.com/database/vulnerability/booked/wordpress-booked-plugin-2-4-unauth-appointment-data-exposure-vulnerability?_s_id=cve

ADP enrichment

CVE

No English description supplied.

https://patchstack.com/database/vulnerability/booked/wordpress-booked-plugin-2-4-unauth-appointment-data-exposure-vulnerability?_s_id=cve