Security Advisory

CVE-2026-14322

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-22 06:00:02

Last updated 2026-07-22 15:01:17

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created through a payment method other than its recognised gateways, allowing unauthenticated users to create fully-approved bookings for priced appointments without making any payment.

← Browse all CVEs View on cve.org ↗