| CVE-2026-106000 |
Booking Package < 1.7.34 - Unauthenticated Payment Bypass
|
5.3
Moyenne
|
4 nov. 2026 |
| CVE-2026-105997 |
The Booking Package WordPress plugin before 1.7.33 does not restrict who can trigger its booking verification-code…
|
5.3
Moyenne
|
28 oct. 2026 |
| CVE-2026-105999 |
The Booking Package WordPress plugin before 1.7.31 does not perform authorization checks before returning…
|
5.3
Moyenne
|
21 oct. 2026 |
| CVE-2026-105998 |
The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting…
|
5.3
Moyenne
|
21 oct. 2026 |
| CVE-2026-105996 |
The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation tokens using a secure source…
|
4.8
Moyenne
|
21 oct. 2026 |
| CVE-2026-105995 |
The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored…
|
5.3
Moyenne
|
10 oct. 2026 |
| CVE-2026-16986 |
The Booking Package WordPress plugin before 1.7.25 does not validate the payment amount server-side against the stored…
|
5.3
Moyenne
|
26 août 2026 |