CVE-2026-92425

The Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin (versions before 1.2.4 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The software fails to perform object-level authorisation checks on several host-management operations. This allows users with an ad...

WordPress Hydra Booking — Appointment Scheduling & Booking Calendar plugin 1.1.0-1.2.2 - Hydra Host+ Host Profile Takeover vulnerability

Hydra Host+ Host Profile Takeover vulnerability discovered by Ossacip Thanh in WordPress Plugin Hydra Booking versions 1.1.0-1.2.2...

WordPress Hydra Booking — Appointment Scheduling & Booking Calendar plugin < 1.2.4 - Hydra Host+ Cross-Host Account Modification and Deletion vulnerability

Hydra Host+ Cross-Host Account Modification and Deletion vulnerability discovered by Stefan Spasic in WordPress Plugin Hydra Booking versions 1.2.4...