CVE-2026-105992 in Ettrick Escape Room Booking Plugininformación

Resumen

por MITRE • 2026-10-22

The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the payment provider before marking it paid and confirmed, allowing unauthenticated attackers to mark bookings as paid without paying.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

WPScan

Reservar

2026-10-06

Divulgación

2026-10-22

Moderación

aceptado

Artículo

VDB-424578

EPSS

0.00153

KEV

no

Actividades

muy bajo

Sector

Hostingprovider

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-105992
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-105992
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-105992/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!