CVE-2026-14322

The Timetics WordPress plugin (versions prior to 1.0.57 ) contains an improper access control vulnerability. The software fails to enforce a pending or unpaid status for new bookings when they are created using a payment method other than its recognized gateways. This allows unauthenticated users...