CVE-2023-2834 : The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7. This is

The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7. This is due to insufficient verification on the user being supplied during booking an appointment through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email.

Published 2023-06-30 02:15:09

Updated 2023-07-06 19:03:08

Source Wordfence

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2023-2834

EPSS FAQ

0.39%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 74 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-2834

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Wordfence
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-2834

CWE-288 Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

Assigned by: security@wordfence.com (Secondary)
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2023-2834

https://plugins.trac.wordpress.org/changeset/2925153/bookit

Changeset 2925153 for bookit – WordPress Plugin Repository
Patch
https://plugins.trac.wordpress.org/browser/bookit/tags/2.3.6/includes/classes/CustomerController.php#L27

CustomerController.php in bookit/tags/2.3.6/includes/classes – WordPress Plugin Repository
Patch
https://www.wordfence.com/blog/2023/06/stylemixthemes-addresses-authentication-bypass-vulnerability-in-bookit-wordpress-plugin/

StylemixThemes Addresses Authentication Bypass Vulnerability in BookIt WordPress Plugin
Exploit;Third Party Advisory
https://plugins.trac.wordpress.org/changeset/2919529/bookit

Changeset 2919529 for bookit – WordPress Plugin Repository
Patch
https://plugins.trac.wordpress.org/browser/bookit/tags/2.3.6/includes/classes/database/Customers.php#L63

Customers.php in bookit/tags/2.3.6/includes/classes/database – WordPress Plugin Repository
Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/cfd32e46-a4fc-4c10-b546-9f9da75db791?source=cve

BookIt <= 2.3.7 - Authentication Bypass
Third Party Advisory
https://lana.codes/lanavdb/0dea1346-fd60-4338-8af6-6f89c29075d4/

BookIt by StylemixThemes WordPress plugin Authentication Bypass – Lana Codes
Exploit;Third Party Advisory

Products affected by CVE-2023-2834

Stylemixthemes » Bookit » For Wordpress
Versions up to, including, (<=) 2.3.7
cpe:2.3:a:stylemixthemes:bookit:*:*:*:*:*:wordpress:*:*
Matching versions

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!

Accept Close

Vulnerability Details : CVE-2023-2834

Exploit prediction scoring system (EPSS) score for CVE-2023-2834

CVSS scores for CVE-2023-2834

CWE ids for CVE-2023-2834

References for CVE-2023-2834

Products affected by CVE-2023-2834