CVE-2026-24371

Unknown Unknown - Not Provided

BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-04-28

Assigner: Patchstack

Description

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through <= 1.8.16.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-22

Last Modified

2026-04-28

Generated

2026-07-06

AI Q&A

2026-01-22

EPSS Evaluated

2026-07-05

NVD

CVE-2026-24371

Affected Vendors & Products

Vendor	Product	Version / Range
bookingalgorithms	ba_book_everything	to 1.8.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Detection Guidance

This vulnerability can be detected by verifying the version of the BA Book Everything plugin installed on your WordPress site. Specifically, check if the plugin version is less than or equal to 1.8.16, which is vulnerable. There are no specific network detection commands provided. To check the plugin version, you can use WordPress CLI commands such as `wp plugin list` to list installed plugins and their versions. [1]

Mitigation Strategies

The immediate step to mitigate this vulnerability is to update the BA Book Everything plugin to version 1.8.17 or later, where the issue has been fixed. Additionally, using automated update tools like Patchstack can help apply rapid mitigations. [1]

Compliance Impact

The provided information does not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.

Executive Summary

This vulnerability is a Missing Authorization issue in the BA Book Everything plugin by bookingalgorithms. It allows attackers to exploit incorrectly configured access control security levels, potentially bypassing restrictions that should prevent unauthorized actions.

Impact Analysis

The impact of this vulnerability could include unauthorized access to booking functions or data within the BA Book Everything system, leading to potential misuse or manipulation of bookings or sensitive information.

Hi! I’m here to help you understand CVE-2026-24371. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70