CyberRota Analysis
AI-GeneratedThe Booking Calendar WordPress plugin prior to version 11.8.3 is vulnerable due to insufficient restrictions on options that lower-privileged users can access, enabling users with the Editor role and above to expose sensitive WordPress configuration values. This could lead to unauthorized disclosure of critical site information, potentially compromising site security. WordPress site administrators and developers utilizing this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users with the Editor role and above to disclose the values of arbitrary WordPress options, including core site configuration.