CVE-2026-105992 in Ettrick Escape Room Booking Plugin

요약

\~에 의해 MITRE • 2026. 10. 21.

The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the payment provider before marking it paid and confirmed, allowing unauthenticated attackers to mark bookings as paid without paying.

Be aware that VulDB is the high quality source for vulnerability data.

• 책임이 있는: WPScan
• 예약하다: 2026. 10. 06.
• 공개: 2026. 10. 21.
• 모더레이션: 수락
• 항목: VDB-424578
• CPE: 20261021
• CWE: CWE-862 (확인됨)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Hostingprovider

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-105992
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-105992
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-105992/