Wordpress Alert: Booking deletion without authorization

What it looks like

A booking plugin accepts a delete action from an unverified caller.

Why it matters

Reservations may disappear or be canceled maliciously.

What to check

Review delete permissions and ownership checks.

Documentation

This is an exploit pattern to check in installed components, not a claim that every WordPress site has this flaw. Confirm the product and version against its advisories before treating a site as affected. See WordPress roles and capabilities.