Input validation vulnerability in Pinpoint Booking System – #1 WordPress Booking Plugin 2.9.9.5.0

The Pinpoint Booking System, a popular plugin for WordPress websites, has a security vulnerability that allows hackers to access sensitive information through a technique called SQL injection. This vulnerability affects all versions of the plugin up to and including version 2.9.9.5.0. It is caused by a lack of proper security measures in the code, which allows attackers with certain levels of access to add their own malicious code to the plugin’s existing code. This can result in the theft of sensitive data from the website’s database.