https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 21:25:16 +0000 https://cve.radiocsirt.org/vuln/cve-2024-7350 <p><strong>Affected:</strong> reputeinfosystems Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress, reputeinfosystems appointment_booking_calendar_plugin_and_scheduling_plugin_bookingpress</p> <p>The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user&#39;s identity prior to logging them in when completing a booking. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if they have access to that user&#39;s email. This is only exploitable when the &#39;Auto login user after successful booking&#39; setting is enabled.</p> <p><strong>Affected:</strong> reputeinfosystems Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress, reputeinfosystems appointment_booking_calendar_plugin_and_scheduling_plugin_bookingpress</p> <p>The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user&#39;s identity prior to logging them in when completing a booking. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if they have access to that user&#39;s email. This is only exploitable when the &#39;Auto login user after successful booking&#39; setting is enabled.</p> https://cve.radiocsirt.org/vuln/cve-2024-7350