5.3
Moyenne
CVE-2026-15229 The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server…
Description
The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbitrary price (including zero) and, by selecting a specific payment method, obtain an instantly-approved reservation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pinpoint Booking System 2.9 | premières → 2.9.9.7.1 | Pas de correctif indiqué |