CVE-2026-1704

Uchrashuvlarni bron qilish taqvimi — WordPress uchun Simply Schedule Uchrashuvlarni bron qilish plagini 1.6.9.29 gacha bo'lgan barcha versiyalarda Insecure Direct Object Referencega zaif. Buning sababi, `get_item_permissions_check` usuli so'ralgan uchrashuvga xodimlarning egalik huquqini tasdiqlamasdan `ssa_manage_appointments` imkoniyatiga ega foydalanuvchilarga kirish huquqini beradi. Bu maxsus darajadagi kirish va undan yuqori darajadagi autentifikatsiyalangan hujumchilar uchun imkon beradi (foydalanuvchilarga ssa_m berilgan).

CVSS Vector

Manbalar

• https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.9.21/includes/class-appointment-model.php#L1348
• https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/tags/1.6.9.21/includes/class-appointment-model.php#L1436
• https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/trunk/includes/class-appointment-model.php#L1348
• https://plugins.trac.wordpress.org/browser/simply-schedule-appointments/trunk/includes/class-appointment-model.php#L1436
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3480506%40simply-schedule-appointments%2Ftrunk&old=3475885%40simply-schedule-appointments%2Ftrunk&sfp_email=&sfph_mail=