https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:34:08.102407+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-14831 CVE-2026-14831 — Easy Booking < 3.5.0 - Unauthenticated Minimum Booking Duration Bypass 2026-10-09T20:34:08.118368+00:00

Affected: Unknown Easy Booking

The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when adding to cart and calculating the booking price, allowing unauthenticated users to place below-minimum bookings and complete underpriced orders.