CVE-2025-15473 Timetics < 1.0.52 - Unauthenticated Payment/Booking Status Update

The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...

CVE-2025-15473 Timetics < 1.0.52 - Unauthenticated Payment/Booking Status Update

The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...

CVE-2025-15473

The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...

CVE-2025-15473

The Timetics WordPress plugin, in versions prior to 1.0.52 , is vulnerable to an authorization bypass in a REST endpoint . This flaw allows unauthenticated users to arbitrarily modify the payment status and post status of the "timetics-booking " custom post type. No specific remediation or exploi...

GHSA-GQC5-XV7M-GCJQ

creationtimestamp| type| source ---|---|--- 2026-03-12 04:10:06+00:00| seen| https://gist.github.com/alon710/e3dc62168c67266174e7a28a55951177...

GHSA-C4P7-RWRG-PF6P

creationtimestamp| type| source ---|---|--- 2026-03-12 03:40:05+00:00| seen| https://gist.github.com/alon710/b03cab59ac9b3af949ff7e9d16d01a05...

CVE-2026-3919

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 04:03:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214214929795362 2026-03-12 21:50:05+00:00| seen|...

CVE-2026-3931

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 04:30:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214321125739442 2026-03-12 21:00:47+00:00| seen|...

CVE-2026-3923

creationtimestamp| type| source ---|---|--- 2026-03-12 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260312 2026-03-12 03:50:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116214163774152917 2026-03-12 22:01:06+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-3939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in PDF in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted PDF fil...

CVE-2025-15473: Missing Authorization

The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...

WordPress plugin Timetics has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-24924

The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type...

Linux kernel Mellanox mlx5 DoS

The vulnerability of the drivers/net/ethernet/mellanox/mlx5 kernel component of the Linux operating system is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-20046

creationtimestamp| type| source ---|---|--- 2026-03-11 23:50:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116213220098846252 2026-03-12 03:00:08+00:00| seen| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W 2026-03-12...

CVE-2025-70244

creationtimestamp| type| source ---|---|--- 2026-03-11 23:10:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116213062812879067 2026-03-12 08:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mgtwm7ojre2u...

GHSA-9JFH-9XRQ-4VWM

creationtimestamp| type| source ---|---|--- 2026-03-11 20:10:06+00:00| seen| https://gist.github.com/alon710/42f2baf7f8222d8e21a959d90dfc0bba...

GHSA-3WF5-G532-RCRR

creationtimestamp| type| source ---|---|--- 2026-03-11 19:40:05+00:00| seen| https://gist.github.com/alon710/50660dc4d55027714a8cd550ac80fb4f...

CVE-2026-32096

creationtimestamp| type| source ---|---|--- 2026-03-11 19:16:18+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32096 2026-03-12 03:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116213968591808640 2026-03-31 15:02:41+00:00|...

CVE-2026-20116

creationtimestamp| type| source ---|---|--- 2026-03-11 16:37:38+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116211519204223592 2026-03-12 03:00:07+00:00| seen| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-xss-MrNAH5Jh...