This vulnerability involves missing authorization checks in the Booking and Rental Manager plugin by magepeopleteam for WooCommerce, allowing attackers to bypass access controls. The issue affects all versions up to 2.2.1. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, impacting data integrity but not confidentiality or availability. No patch or mitigation details have been provided by the vendor or in public advisories as of the publication date.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform unauthorized actions that modify data integrity within the affected plugin. There is no impact on confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from magepeopleteam and consider restricting access to the affected plugin functionality where possible.