Security Advisory
CVE-2025-12841
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options.