A missing authorization vulnerability exists in Liquid Web / StellarWP BookIt plugin versions up to 2.6.0.6. This flaw allows exploitation of incorrectly configured access control security levels, potentially enabling unauthorized actions. The vulnerability has a medium severity rating with a CVSS score of 4.3.