Security Advisory

CVE-2026-86475

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-16 06:30:11

Last updated 2026-09-16 17:37:43

Assigner WPScan

CVSS score 5.3

State PUBLISHED

Description

The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission against the capacity configured for its own slot, allowing unauthenticated visitors to take slots that are already fully booked.

← Browse all CVEs View on cve.org ↗