A vulnerability has been found in Course Booking System Plugin up to 6.1.5 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functionality of the file csv-export.php of the component Booking Data Export. Performing manipulation results in missing authorization.

This vulnerability is identified as CVE-2025-12042. The attack can be initiated remotely. There is not any exploit available.