5.3
Moyenne
CVE-2026-105992 The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the…
Description
The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the payment provider before marking it paid and confirmed, allowing unauthenticated attackers to mark bookings as paid without paying.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ettrick Escape Room Booking 1.3 | premières → < 1.3.1 | 1.3.1 |