Threats tagged 'ghsa-3qf4-97w4-w66g'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-16067The Event Booking Manager for WooCommerce (Pro) WordPress plugin before 5.0.3 does not validate the ticket price on Medium5.3EPSS 0.3%2026-08-07GCVE DatabaseCVE-2026-16067 The Event Booking Manager for WooCommerce (Pro) WordPress plugin versions before 5.0.3 contains a vulnerability where the ticket price is not validated on the server during its native checkout process. This flaw allows unauthenticated users to supply arbitrary ticket prices, potentially booking paid event tickets for free and obtaining valid bookings without payment. EPSS 0.3%Report on CVE-2026-16067 Vulnerability CWE-472 #ghsa-3qf4-97w4-w66g	GCVE Database	2026-08-07

Page 1 of 1