CVE-2026-14831 The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking…

Description

The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when adding to cart and calculating the booking price, allowing unauthenticated users to place below-minimum bookings and complete underpriced orders.

Produits et versions touchés