Approved changes feed: RSS · Atom

cpe:2.3:a:tyche_softwares:booking_&_appointment_plugin_for_woocommerce:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTyche Softwares (93a72224-8e6c-52ef-8409-1e2a50a7672f)
ProductBooking & Appointment Plugin For Woocommerce (92455bf2-6a1e-5518-b714-33c6f6620160)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10729 vulnerable 2026-06-08 06:23:47.382880 Booking & Appointment Plugin for WooCommerce <= 6.9.0 - Authenticated (Subscriber+) Arbitrary Option Update
HIGH (8.8)
The Booking & Appointment Plugin for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_google_calendar_data' function in versions up to, and including, 6.9.0. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update the site options arbitrarily.
Published: 2024-11-26T02:06:33.565Z
Updated: 2026-04-08T16:59:47.974Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.