Threats tagged 'ghsa-4297-h9g9-88r5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-106000The Booking Package WordPress plugin before 1.7.34 does not require payment to be completed before saving a booking on High2026-11-04GCVE DatabaseCVE-2026-106000 The Booking Package WordPress plugin versions prior to 1.7.34 allow unauthenticated users to create confirmed bookings without completing payment when calendars are configured to require online payment. This occurs because the plugin does not enforce payment completion before saving a booking. Report on CVE-2026-106000 Vulnerability #ghsa-4297-h9g9-88r5	GCVE Database	2026-11-04

Page 1 of 1