CVE-2026-14322

The Timetics WordPress plugin (versions before 1.0.57 ) contains a vulnerability where it fails to enforce a pending or unpaid status for new bookings created via payment methods other than its recognized gateways. This flaw allows unauthenticated users to create fully-approved bookings for price...