CyberRota Analysis
AI-GeneratedThe Bookit — Booking & Appointment Calendar WordPress plugin prior to version 2.6.0.1 is vulnerable to improper data restriction, enabling unauthenticated users to access sensitive customer appointment details, including comments and contact information. This exposure could lead to privacy breaches and unauthorized data disclosure. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential risks.
Original NVD Description
The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated users to retrieve other customers' appointment details, including free-text booking comments and contact information.