Skip to content
Sign in
5.3 Medium

CVE-2026-15229 The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server…

Description

The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbitrary price (including zero) and, by selecting a specific payment method, obtain an instantly-approved reservation.

Affected products and versions

Product Affected versions Fixed in
Pinpoint Booking System 2.9 earliest → 2.9.9.7.1 No fix stated

Other CVEs of Pinpoint Booking System

The 3 CVEs of Pinpoint Booking System →
CVE-2024-3636 The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings,… 5.4 Medium CVE-2023-0220 The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode… 8.8 High
Track this CVE