Input validation vulnerability in WooCommerce Booking Bundle Hours 0.7.4

The plugin called WooCommerce Booking Bundle Hours for WordPress has a security issue that puts it at risk for Cross-Site Request Forgery. This can happen in any version up to and including 0.7.4. The problem is that the plugin doesn’t properly check for a security code before allowing a certain function to be performed. This means that someone who is not authorized could potentially trick a website administrator into doing something they shouldn’t, like clicking on a malicious link.