CVE-2025-12787 | Hydra Booking Plugin up to 1.1.27 on WordPress AJAX Endpoint tfhb_meeting_form_submit_callback excessive authentication

A vulnerability was found in Hydra Booking Plugin up to 1.1.27 on WordPress. It has been rated as problematic. The affected element is the function tfhb_meeting_form_submit_callback of the component AJAX Endpoint. Performing manipulation results in improper restriction of excessive authentication attempts.

This vulnerability is identified as CVE-2025-12787. The attack can be initiated remotely. There is not any exploit available.