https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:44:58.962319+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-157787 EUVD-2026-157787 2026-10-09T18:44:58.964627+00:00 EUVD-2026-157787 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7350 fkie_cve-2024-7350 2026-10-09T18:44:58.964665+00:00

The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user's identity prior to logging them in when completing a booking. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if they have access to that user's email. This is only exploitable when the 'Auto login user after successful booking' setting is enabled.

 https://cve.radiocsirt.org/vuln/ghsa-p4w8-h9fh-v4qp GHSA-p4w8-h9fh-v4qp 2026-10-09T18:44:58.964706+00:00

The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user's identity prior to logging them in when completing a booking. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if they have access to that user's email. This is only exploitable when the 'Auto login user after successful booking' setting is enabled.