Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:02:07 +0000 EUVD-2026-290845 https://cve.radiocsirt.org/vuln/euvd-2026-290845 EUVD-2026-290845 https://cve.radiocsirt.org/vuln/euvd-2026-290845 fkie_cve-2026-2519 https://cve.radiocsirt.org/vuln/fkie_cve-2026-2519 <p>The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the &#39;tips&#39; parameter in all versions up to, and including, 27.0. This is due to the plugin trusting a user-supplied input without server-side validation against the configured price. This makes it possible for unauthenticated attackers to submit a negative number to the &#39;tips&#39; parameter, causing the total price to be reduced to zero.</p> <p>The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the &#39;tips&#39; parameter in all versions up to, and including, 27.0. This is due to the plugin trusting a user-supplied input without server-side validation against the configured price. This makes it possible for unauthenticated attackers to submit a negative number to the &#39;tips&#39; parameter, causing the total price to be reduced to zero.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-2519 GHSA-ghp2-h9w4-7r66 https://cve.radiocsirt.org/vuln/ghsa-ghp2-h9w4-7r66 <p>The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the &#39;tips&#39; parameter in all versions up to, and including, 27.0. This is due to the plugin trusting a user-supplied input without server-side validation against the configured price. This makes it possible for unauthenticated attackers to submit a negative number to the &#39;tips&#39; parameter, causing the total price to be reduced to zero.</p> <p>The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the &#39;tips&#39; parameter in all versions up to, and including, 27.0. This is due to the plugin trusting a user-supplied input without server-side validation against the configured price. This makes it possible for unauthenticated attackers to submit a negative number to the &#39;tips&#39; parameter, causing the total price to be reduced to zero.</p> https://cve.radiocsirt.org/vuln/ghsa-ghp2-h9w4-7r66