Known vulnerabilities in the booking-management actions, which are additionally exposed to unauthenticated users and gated only by a token the Tripzzy plugin

1 security advisory has been published for the booking-management actions, which are additionally exposed to unauthenticated users and gated only by a token the Tripzzy plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.