CyberRota
← Ana sayfaya dön

CVE-2026-9830

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-27T07:16:30.503 · Çekilme zamanı: 2026-07-27T12:09:41.001826+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-9830
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
WordPress

Orijinal NVD Açıklaması

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.