CVE-2026-86475 in Appointment Hour Booking Plugin

الملخص

بحسب MITRE • 16/09/2026

The Appointment Hour Booking WordPress plugin before 1.5.95 does not check every appointment in a booking submission against the capacity configured for its own slot, allowing unauthenticated visitors to take slots that are already fully booked.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: WPScan
• حجز: 07/09/2026
• إفشاء: 16/09/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-405498
• CPE: جاهز
• CWE: CWE-20 (مؤكد)
• CVSS: 5.3 (CNA)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-86475
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-86475
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-86475/