https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 09:27:02 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341384 EUVD-2026-341384 https://cve.radiocsirt.org/vuln/euvd-2026-341384 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9830 <p>The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users&#39; bookings.</p> <p>The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users&#39; bookings.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9830 https://cve.radiocsirt.org/vuln/ghsa-5h5h-jh94-gqhv <p>The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users&#39; bookings.</p> <p>The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users&#39; bookings.</p> https://cve.radiocsirt.org/vuln/ghsa-5h5h-jh94-gqhv