Beveiligingsadvies

CVE-2026-15229

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-10 06:00:17

Laatst bijgewerkt 2026-08-12 15:05:19

Toegewezen door WPScan

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbitrary price (including zero) and, by selecting a specific payment method, obtain an instantly-approved reservation.

← Alle CVE's bekijken Bekijk op cve.org ↗