Vulnerabilities
CVE-2025-12685 - WPBookit <= 1.0.7 - customer deletion via csrf
CVE ID : CVE-2025-12685 Published : Jan. 2, 2026, 6:15 a.m. | 1 hour, 38 minutes ago Description : The WPBookit WordPress plugin through 1.0.7 lacks a CSRF check when deleting customers. This could allow an unauthenticated attacker to delete any customer through a CSRF attack. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Source: Telegram CVE Monitor