Veille CVE

Recherche « Unknown bookingpress-appointment-booking-pro »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown bookingpress-appointment-booking-pro » ✕
  1. CVE-2026-9830 8.2 Élevée

    Unknown bookingpress-appointment-booking-pro

    The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.