Booking Hub
Monthly
Privilege escalation in the LiquidThemes Booking Hub WordPress plugin (≤1.3.1) allows authenticated low-privileged users to incorrectly assign themselves or others elevated WordPress roles, up to and including administrator. The flaw stems from CWE-266 (Incorrect Privilege Assignment) - the plugin fails to enforce proper capability checks before processing role or privilege assignment operations. CVSS 8.8 (PR:L) confirms exploitation requires an existing low-privilege account; no public exploit code or CISA KEV listing identified at time of analysis.
Subscriber-level privilege escalation in the Booking Hub WordPress plugin (versions ≤ 1.3.0) allows authenticated users with only subscriber-level access to elevate their privileges to administrator-equivalent roles. The CVSS 8.8 vector (AV:N/AC:L/PR:L/UI:N) confirms network-accessible exploitation with full confidentiality, integrity, and availability impact once a low-privilege account is obtained. No public exploit or CISA KEV listing has been identified at time of analysis, but the low attack complexity makes this a realistic priority for any WordPress site running the affected plugin with user registration enabled.
Privilege escalation in the LiquidThemes Booking Hub WordPress plugin (≤1.3.1) allows authenticated low-privileged users to incorrectly assign themselves or others elevated WordPress roles, up to and including administrator. The flaw stems from CWE-266 (Incorrect Privilege Assignment) - the plugin fails to enforce proper capability checks before processing role or privilege assignment operations. CVSS 8.8 (PR:L) confirms exploitation requires an existing low-privilege account; no public exploit code or CISA KEV listing identified at time of analysis.
Subscriber-level privilege escalation in the Booking Hub WordPress plugin (versions ≤ 1.3.0) allows authenticated users with only subscriber-level access to elevate their privileges to administrator-equivalent roles. The CVSS 8.8 vector (AV:N/AC:L/PR:L/UI:N) confirms network-accessible exploitation with full confidentiality, integrity, and availability impact once a low-privilege account is obtained. No public exploit or CISA KEV listing has been identified at time of analysis, but the low attack complexity makes this a realistic priority for any WordPress site running the affected plugin with user registration enabled.