CVE-2025-39457: WordPress Booking and Rental Manager plugin <= 2.2.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Booking and Rental Manager: from n/a through 2.2.8.
Other sources
Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through <= 2.2.8.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39457?
CVE-2025-39457 is classified as a missing authorization vulnerability which can lead to unauthorized access to sensitive functionalities.
How do I fix CVE-2025-39457?
To fix CVE-2025-39457, upgrade the Booking and Rental Manager plugin to version 2.2.9 or later to ensure proper access control measures are in place.
What versions of Booking and Rental Manager are affected by CVE-2025-39457?
CVE-2025-39457 affects all versions of Booking and Rental Manager from n/a up to and including 2.2.8.
What type of vulnerability is CVE-2025-39457?
CVE-2025-39457 is a broken access control vulnerability that results from incorrectly configured access control security levels.
Who is impacted by CVE-2025-39457?
Users of the Booking and Rental Manager and WordPress Booking and Rental Manager plugin versions up to 2.2.8 are impacted by CVE-2025-39457.