Threats tagged 'ghsa-h8fj-8c8p-pcww'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-88995Bookit (WordPress plugin) · Information Exposure Medium5.3EPSS 0.3%2026-09-13CVE Database V5CVE-2026-88995 The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated users to retrieve other customers' appointment details, including free-text booking comments and contact information. EPSS 0.3%Vulnerability CWE-200 #ghsa-h8fj-8c8p-pcww	CVE Database V5	2026-09-13

Page 1 of 1