Beveiligingsadvies

CVE-2026-88995

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-13 06:00:09

Laatst bijgewerkt 2026-09-13 10:44:21

Toegewezen door WPScan

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated users to retrieve other customers' appointment details, including free-text booking comments and contact information.

← Alle CVE's bekijken Bekijk op cve.org ↗