Threats tagged 'ghsa-x3pm-jvrv-w8w8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-92408The WPS Bookings for WooCommerce WordPress plugin before 3.13.1 does not validate a price value taken from user input Medium5.32026-11-11GCVE DatabaseCVE-2026-92408 A vulnerability in the WPS Bookings for WooCommerce WordPress plugin versions before 3.13.1 allows unauthenticated users to manipulate the price of bookable services by submitting arbitrary price values. This lack of input validation can enable attackers to purchase services at a price of their choosing, including zero. Report on CVE-2026-92408 Vulnerability #ghsa-x3pm-jvrv-w8w8	GCVE Database	2026-11-11

Page 1 of 1