Threats tagged 'ghsa-jf6v-v63c-q8q2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-105997The Booking Package WordPress plugin before 1.7.33 does not restrict who can trigger its booking verification-code Medium2026-10-28GCVE DatabaseCVE-2026-105997 The Booking Package WordPress plugin versions before 1.7.33 allow unauthenticated users to trigger booking verification-code emails to arbitrary recipients without restriction or server-side binding. This can lead to abuse of the email functionality to send unsolicited templated emails. Report on CVE-2026-105997 Vulnerability #ghsa-jf6v-v63c-q8q2	GCVE Database	2026-10-28

Page 1 of 1