https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 05:45:02 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349277 EUVD-2026-349277 https://cve.radiocsirt.org/vuln/euvd-2026-349277 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15152 <p>The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment made to the site&#39;s own merchant account, nor that the paid amount matches the booking total, allowing unauthenticated users to have their bookings marked as fully paid without any payment reaching the site owner.</p> <p>The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment made to the site&#39;s own merchant account, nor that the paid amount matches the booking total, allowing unauthenticated users to have their bookings marked as fully paid without any payment reaching the site owner.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-15152 https://cve.radiocsirt.org/vuln/ghsa-gr3g-w52p-ff6r <p>The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment made to the site&#39;s own merchant account, nor that the paid amount matches the booking total, allowing unauthenticated users to have their bookings marked as fully paid without any payment reaching the site owner.</p> <p>The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that a payment notification corresponds to a payment made to the site&#39;s own merchant account, nor that the paid amount matches the booking total, allowing unauthenticated users to have their bookings marked as fully paid without any payment reaching the site owner.</p> https://cve.radiocsirt.org/vuln/ghsa-gr3g-w52p-ff6r