7.5
Élevée
CVE-2026-76586 The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the…
Description
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount actually paid against the server-side price staged for a booking when confirming an online payment, allowing unauthenticated users to have a paid appointment approved for a fraction of its price.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Appointment Booking Calendar Plugin and Scheduling Plugin 1.5 | 1.5.6 → < 1.6.3 | 1.6.3 |