Appointment Booking Plugin CVE-2026-105257

Exploitation requires an authenticated agent-level account within the Appointment Booking Plugin (per the supplied CVSS PR:H), and is limited to plugin versions before 5.7.5. The specific condition is that the plugin's customer retrieval and search functions do not validate the agent-to-customer assignment relationship before returning or searching a record, so any valid agent can access customers belonging to other agents. Limiting factors: an attacker must already hold or compromise an agent credential (no anonymous/unauthenticated access), impact is confined to reading/enumerating customer personal data with no write or availability effect, and sites running 5.7.5 or later are not affected.

This is a genuine-but-low-priority issue, and the signals are internally consistent rather than conflicting. The provided CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N = 2.7, Low) reflects that exploitation requires an already-authenticated agent-level account (PR:H) and yields only limited confidentiality impact (C:L) with no integrity or availability effect - consistent with the CWE-639 (IDOR / authorization bypass through user-controlled key) classification. A public exploit exists (WPScan), which raises operability, but public POC availability is NOT active exploitation: the CVE is not listed in CISA KEV and no EPSS score was provided in the input, so real-world exploitation likelihood cannot be quantified from the data given. The realistic threat is insider/abuse by a low-trust staff ('agent') account or by an attacker who has already compromised such an account, enabling horizontal access to all customers' PII - a privacy and compliance concern rather than a server-compromise event. Net: patch in normal cycles; this is a low-CVSS, low-urgency authorization flaw whose main value to an attacker is bulk PII harvesting, not system takeover. Note one tension worth verifying: the input CVSS uses PR:H, but 'agent-level' typically denotes a limited, non-admin staff role - if agents are low-privilege the honest rating is PR:L, which would raise the score slightly (see assessed vector).

A malicious or compromised agent-level staff user logs into the WordPress site and invokes the plugin's customer read/search functionality using a customer identifier that is not assigned to them. Because the plugin never checks the agent-to-customer assignment, it returns the target record, letting the agent iterate identifiers to enumerate and export the personal information of every customer on the site. A public exploit for this flow is available from WPScan.