Input validation vulnerability in Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment 2.2.6

The plugin used for managing bookings and rentals for bikes, cars, resorts, appointments, dresses, and equipment on WordPress has a security vulnerability. This vulnerability, called PHP Object Injection, allows attackers with Contributor-level access or higher to insert malicious code into the plugin. However, this vulnerability will only have an impact if the site also has another plugin or theme with a specific type of code called a POP chain. If this is the case, the attacker may be able to delete files, access sensitive information, or run their own code on the site.