Privilege Escalation in GemBooking WordPress Plugin

Executive Summary

The GemBooking WordPress plugin before version 1.7.1 has a vulnerability where it fails to properly check if REST requests are meant for its own routes. This allows users with the Staff role to temporarily gain admin privileges, letting them delete posts and change site settings.

Useful 0 Not Useful 0

Detection Guidance

Check if the GemBooking WordPress plugin version is below 1.7.1 using WordPress admin panel or run: wp plugin list | grep gembooking in WP-CLI. Inspect REST API requests for unauthorized administrative actions by staff users.

Useful 0 Not Useful 0

Impact Analysis

If you use the GemBooking plugin before 1.7.1, an attacker with the Staff role could delete important posts or alter your site's settings, potentially disrupting your website's functionality or content.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized changes or deletions of sensitive data, which may violate compliance requirements under GDPR or HIPAA if personal or protected health information is affected.

Useful 0 Not Useful 0

Mitigation Strategies

Update the GemBooking plugin to version 1.7.1 or later immediately. Review user roles with Staff privileges and restrict unnecessary permissions. Monitor site settings and posts for unauthorized changes.

Useful 0 Not Useful 0