CVE-2026-14322

CVE-2026-14322 affects the Timetics WordPress plugin prior to 1.0.57. The vulnerability arises because the plugin does not enforce a pending or unpaid status for new bookings created through a payment method outside its recognised gateways, allowing unauthenticated users to create fully approved ...