Input validation vulnerability in WooCommerce Bookings 2.0.3

The WooCommerce Bookings plugin for WordPress is vulnerable to a type of attack that can allow an unauthenticated attacker to make changes on the website without the website administrator’s knowledge. This is because the plugin is missing or incorrectly using a type of security system called a nonce on one of its functions. If a website administrator is tricked into clicking on a link, the attacker could use the plugin to make changes on the website. To fix this issue, the plugin needs to be updated to version 2.0.3 or higher.