https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:33:20.838697+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349288 EUVD-2026-349288 2026-10-08T11:33:20.887427+00:00 EUVD-2026-349288 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16067 fkie_cve-2026-16067 2026-10-08T11:33:20.887466+00:00

The Event Booking Manager for WooCommerce (Pro) WordPress plugin before 5.0.3 does not validate the ticket price on the server during its native (non-WooCommerce) checkout, trusting the per-ticket price supplied by the client instead of re-deriving the event's configured price. This allows unauthenticated users to book paid event tickets for free, obtaining completed bookings and valid tickets at no cost.

 https://cve.radiocsirt.org/vuln/ghsa-3qf4-97w4-w66g GHSA-3qf4-97w4-w66g 2026-10-08T11:33:20.887503+00:00

The Event Booking Manager for WooCommerce (Pro) WordPress plugin before 5.0.3 does not validate the ticket price on the server during its native (non-WooCommerce) checkout, trusting the per-ticket price supplied by the client instead of re-deriving the event's configured price. This allows unauthenticated users to book paid event tickets for free, obtaining completed bookings and valid tickets at no cost.