Beveiligingsadvies

CVE-2026-87892

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-12 06:00:13

Laatst bijgewerkt 2026-09-12 15:29:10

Toegewezen door WPScan

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The Rox Appointment Booking WordPress plugin before 1.2.0 does not verify the order total or the selected payment method against its own server-side pricing when creating a booking, allowing unauthenticated attackers to create confirmed bookings at an arbitrary price and to bypass the site's configured payment-method restrictions.

← Alle CVE's bekijken Bekijk op cve.org ↗