Home Tools CVE CVE-2026-74002
MEDIUM

CVE-2026-74002

2026-09-17 CVSS v3.1
CVSS
5.3

Description

Unauthenticated Broken Access Control in Booking Calendar <= 11.7 versions.

Weakness (CWE)

CWE-862 Missing Authorization

EPSS Score

0.21%
Probability of exploitation in next 30 days
12.1th percentile

References

https://patchstack.com/database/wordpress/plugin/booking/vulnerability/wordpress-booking-calendar-plugin-11-7-broken-access-control-vulnerability?_s_id=cve
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE