CVE-2025-12841

Bookit < 2.5.1 – Unauthenticated Settings Update PUBLISHED

Description (CNA)

The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options.

Affected (CNA)

Vendor / product	Versions
Unknown / Bookit	affected 0 before 2.5.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/60cb3d5f-1aa5-4858-ab84-07fe7c023fdd/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.