Veille CVE

Recherche « Unknown WPS Bookings for WooCommerce »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown WPS Bookings for WooCommerce » ✕
  1. CVE-2026-12393 5.4 Moyenne

    Unknown WPS Bookings for WooCommerce

    The WPS Bookings for WooCommerce WordPress plugin before 3.11.7 does not verify that a booking order belongs to the requesting user before cancelling it, allowing any authenticated user, such as a Subscriber or Customer, to cancel and void other customers' booking orders.