https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:32:36 +0000 https://cve.radiocsirt.org/vuln/cve-2026-2519 <p><strong>Affected:</strong> ladela Online Scheduling and Appointment Booking System – Bookly</p> <p>The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the &#39;tips&#39; parameter in all versions up to, and including, 27.0. This is due to the plugin trusting a user-supplied input without server-side validation against the configured price. This makes it possible for unauthenticated attackers to submit a negative number to the &#39;tips&#39; parameter, causing the total price to be reduced to zero.</p> <p><strong>Affected:</strong> ladela Online Scheduling and Appointment Booking System – Bookly</p> <p>The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the &#39;tips&#39; parameter in all versions up to, and including, 27.0. This is due to the plugin trusting a user-supplied input without server-side validation against the configured price. This makes it possible for unauthenticated attackers to submit a negative number to the &#39;tips&#39; parameter, causing the total price to be reduced to zero.</p> https://cve.radiocsirt.org/vuln/cve-2026-2519