Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Bookit — Booking & Appointment Calendar 2.6.0.5 Clear all filters
TI-2026-60324 CVE-2026-89008 · GHSA-qcfp-hh5m-fp23

Bookit < 2.6.0.5 - Bookit Staff+ Appointment PII Disclosure

Priority LOW 13

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform an authorization check on one of its appointment-retrieval actions, allowing users with a low-privilege Bookit — Booking & Appo…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00316 Published 2026-09-18 Fixed in 2.6.0.5 CWE-200
TI-2026-60323 CVE-2026-89007 · GHSA-2963-vmc7-jqxw

Bookit < 2.6.0.5 - Bookit Staff+ Arbitrary Appointment Deletion via Missing Authorization

Priority LOW 13

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.5 does not perform a capability check in one of its appointment-deletion functions, allowing users with its low-privileged custom Staff role to de…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00281 Published 2026-09-18 Fixed in 2.6.0.5 CWE-862