A vulnerability, which was classified as critical, was found in themeenergy BookYourTravel Plugin up to 8.18.17 on WordPress. This affects an unknown part. The manipulation leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2024-37952. It is possible to initiate the attack remotely. There is no exploit available.