https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 15:30:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-338416 EUVD-2026-338416 https://cve.radiocsirt.org/vuln/euvd-2026-338416 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12393 <p>The WPS Bookings for WooCommerce WordPress plugin before 3.11.7 does not verify that a booking order belongs to the requesting user before cancelling it, allowing any authenticated user, such as a Subscriber or Customer, to cancel and void other customers&#39; booking orders.</p> <p>The WPS Bookings for WooCommerce WordPress plugin before 3.11.7 does not verify that a booking order belongs to the requesting user before cancelling it, allowing any authenticated user, such as a Subscriber or Customer, to cancel and void other customers&#39; booking orders.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-12393 https://cve.radiocsirt.org/vuln/ghsa-29vx-66rc-rcvq <p>The WPS Bookings for WooCommerce WordPress plugin before 3.11.7 does not verify that a booking order belongs to the requesting user before cancelling it, allowing any authenticated user, such as a Subscriber or Customer, to cancel and void other customers&#39; booking orders.</p> <p>The WPS Bookings for WooCommerce WordPress plugin before 3.11.7 does not verify that a booking order belongs to the requesting user before cancelling it, allowing any authenticated user, such as a Subscriber or Customer, to cancel and void other customers&#39; booking orders.</p> https://cve.radiocsirt.org/vuln/ghsa-29vx-66rc-rcvq