CVE-2026-123128

The GemBooking WordPress plugin (versions prior to 1.7.1 ) is vulnerable to an unauthenticated team member double-booking due to a cross-object race condition . The software fails to serialize concurrent booking requests per team member, which allows an unauthenticated user to create overlapping ...

CVE-2008-0294: Undefined Security Weakness

Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat more than once via unspecified vectors...