https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T16:45:58.308661+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-385319 EUVD-2026-385319 2026-10-10T16:45:58.310852+00:00 EUVD-2026-385319 https://cve.radiocsirt.org/vuln/fkie_cve-2026-105995 fkie_cve-2026-105995 2026-10-10T16:45:58.310889+00:00

The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens.

 https://cve.radiocsirt.org/vuln/ghsa-hhf8-8xcf-35xv GHSA-hhf8-8xcf-35xv 2026-10-10T16:45:58.310941+00:00

The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other customers' personal information and booking cancellation tokens.