cve/2024/CVE-2024-12274.md

### [CVE-2024-12274](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12274)
![](https://img.shields.io/static/v1?label=Product&message=Appointment%20Booking%20Calendar%20Plugin%20and%20Scheduling%20Plugin&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%201.1.23%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-200%20Information%20Exposure&color=brighgreen)

### Description

The Appointment Booking Calendar Plugin and Scheduling Plugin  WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist).

### POC

#### Reference
- https://wpscan.com/vulnerability/e3176c9a-63f3-4a28-a8a7-8abb2b4100ef/

#### Github
No PoCs found on GitHub currently.