Skip to content
Sign in
7.5 High

CVE-2026-76586 The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the…

Description

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount actually paid against the server-side price staged for a booking when confirming an online payment, allowing unauthenticated users to have a paid appointment approved for a fraction of its price.

Affected products and versions

Product Affected versions Fixed in
Appointment Booking Calendar Plugin and Scheduling Plugin 1.5 1.5.6 → < 1.6.3 1.6.3

Other CVEs of Appointment Booking Calendar Plugin and Scheduling Plugin

The 3 CVEs of Appointment Booking Calendar Plugin and Scheduling Plugin →
CVE-2026-12378 The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin through 1.1.28 does not validate data… 8.1 High CVE-2024-12274 The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings… 7.5 High
Track this CVE