This vulnerability in Webba Booking arises from missing authorization checks due to incorrectly configured access control settings. It affects versions up to 5.1.20 and allows unauthorized users to perform certain actions without proper permissions. The CVSS score of 6.5 reflects a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The impact includes integrity and availability loss but no confidentiality compromise. No official patch or vendor advisory is currently available.

Exploitation of this vulnerability can lead to unauthorized modification or disruption of the Webba Booking plugin's functionality, impacting data integrity and availability. Confidential information is not affected according to the CVSS vector. There are no known exploits in the wild, and the vulnerability requires no privileges or user interaction to exploit.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations in Webba Booking to prevent unauthorized actions. Monitor for vendor updates and apply patches promptly once available.