Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress.
CWE-862, CWE-862