Access violation vulnerability in WP BASE Booking of Appointments, Services and Events 4.9.2

The Booking plugin for WordPress, called WP BASE, has a security issue that allows unauthorized people to access sensitive data without permission. This happens because the plugin doesn’t have a check in place to prevent it. This means that anyone with a Subscriber account or higher can potentially view private information from the database, like the protected password of the main administrator.