Threats tagged 'ghsa-xw47-5rhr-f2hq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.7	EPSS 0.3%	CVE-2026-14214Booking for Appointments and Events Calendar (WordPress plugin) · Improper Authentication Low2.7EPSS 0.3%2026-08-01CVE Database V5CVE-2026-14214 The Booking for Appointments and Events Calendar WordPress plugin before 2.4.4 does not restrict which fields can be written through its customer import, allowing a user with the Amelia Manager role to modify arbitrary columns of any stored user record by supplying them in the import request. EPSS 0.3%Vulnerability CWE-287 #ghsa-xw47-5rhr-f2hq	CVE Database V5	2026-08-01

Page 1 of 1