Veille CVE

Recherche « Unknown Appointment Hour Booking »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Appointment Hour Booking » ✕
  1. CVE-2026-86475 5.3 Moyenne

    Unknown Appointment Hour Booking

    The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission against the capacity configured for its own slot, allowing unauthenticated visitors to take slots that are already fully booked.

  2. CVE-2026-16282 5.3 Moyenne

    Unknown Appointment Hour Booking

    The Appointment Hour Booking WordPress plugin before 1.5.88 does not validate a client-supplied booking price against the server-side configured service price, allowing unauthenticated users to submit an arbitrary final price (including zero or negative) that is stored as the authoritative booking price, corrupting booking and payment records.