CVE-2026-116557

The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpbsactionajaxcalendarremovenote function in versions up to, and including, 2.1.0.5 This makes it possible for authenticated attackers, with...