Security Advisory

CVE-2026-15229

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-10 06:00:17

Last updated 2026-08-12 15:05:19

Assigner WPScan

CVSS score 5.3

State PUBLISHED

Description

The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbitrary price (including zero) and, by selecting a specific payment method, obtain an instantly-approved reservation.

← Browse all CVEs View on cve.org ↗