← Database

CVE-2025-12841

MEDIUM CVSS: 5.3 Published: 2025-12-12 Modified: 2026-06-17

Description

The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options.

Affected Platforms

Unknown

Weakness Type

Unknown

References