← CVE Intelligence

CVE-2024-2441

VikBooking < 1.6.8 - Insecure Direct Object References PUBLISHED

Description (CNA)

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's they shouldn't be allowed to.

Affected (CNA)

Vendor / productVersions
Unknown / VikBooking Hotel Booking Engine & PMSaffected 0 before 1.6.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.