CVE-2026-92425 in Hydra Booking Plugin
Résumé
par MITRE • 19/09/2026
The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin before 1.2.4 does not perform object-level authorisation checks on several of its host-management operations, allowing users who hold its own administrator-assigned custom role to read, modify and permanently delete other hosts' records and the WordPress user accounts linked to them.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.