Vulnerability found in Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress

The BookingPress plugin for WordPress has a security issue that can allow unauthorized access to important information. This can potentially lead to someone gaining more privileges than they should have. This vulnerability affects all versions up to and including 1.1.5, and can be exploited by anyone with Subscriber-level access or higher. They can change settings on the website and upload files without permission. This can be used to give themselves admin access and control over the website.