Lucene search
K

41 matches found

RedhatCVE
RedhatCVE
added 2026/03/06 7:55 a.m.2 views

CVE-2026-27390

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

8.8CVSS5.8AI score0.00036EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/06 7:55 a.m.0 views

CVE-2026-27389

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

9.8CVSS5.8AI score0.001EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/05 6:30 a.m.1 views

EUVD-2026-9642

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

5.9AI score0.00036EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/05 6:30 a.m.2 views

EUVD-2026-9641

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

5.9AI score0.001EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/05 6:30 a.m.2 views

EUVD-2025-208307

Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.3...

7.5CVSS5.9AI score0.00061EPSS
Exploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.2 views

CVE-2026-27389

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

9.8CVSS0.001EPSS
Exploits0References1
NVD
NVD
added 2026/03/05 6:16 a.m.1 views

CVE-2026-27390

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

8.8CVSS0.00036EPSS
Exploits0References1
NVD
NVD
added 2026/03/05 6:16 a.m.1 views

CVE-2025-69340

Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.3...

7.5CVSS0.00061EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/05 5:53 a.m.24 views

CVE-2026-27389 WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

9.8CVSS0.001EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/05 5:53 a.m.25 views

CVE-2026-27390 WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

8.8CVSS0.00036EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:53 a.m.0 views

CVE-2026-27390 WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

5.8AI score0.00036EPSS
Exploits0References1
CVE
CVE
added 2026/03/05 5:53 a.m.9 views

CVE-2026-27390

The CVE CVE-2026-27390 affects the WordPress plugin WeDesignTech Ultimate Booking Addon (versions n/a through 1.0.1). Red Hat and CVE records describe an Authentication Bypass/Authentication Abuse leading to potential account takeover. Wordfence reports this vulnerability as Unpatched for the add...

8.8CVSS5.9AI score0.00036EPSS
Exploits0References1
CVE
CVE
added 2026/03/05 5:53 a.m.8 views

CVE-2026-27389

CVE-2026-27389 refers to an Authentication Bypass vulnerability in the designthemes WeDesignTech Ultimate Booking Addon (plugin slug wedesigntech-ultimate-booking-addon) affecting versions up to and including 1.0.1. The issue allows authentication abuse via an alternate path or channel, potential...

9.8CVSS5.9AI score0.001EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 5:53 a.m.1 views

CVE-2026-27389

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

5.9AI score0.001EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/05 5:53 a.m.0 views

CVE-2026-27389 WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

5.8AI score0.001EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 5:53 a.m.1 views

CVE-2026-27390

Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.1...

5.9AI score0.00036EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/05 5:53 a.m.2 views

CVE-2025-69340 WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.3...

7.5CVSS5.9AI score0.00061EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/05 5:53 a.m.26 views

CVE-2025-69340 WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through = 1.0.3...

7.5CVSS0.00061EPSS
Exploits0References1
CVE
CVE
added 2026/03/05 5:53 a.m.5 views

CVE-2025-69340

CVE-2025-69340 is a Missing Authorization vulnerability in the WordPress plugin WeDesignTech Ultimate Booking Addon (versions up to 1.0.3). The issue enables improper access control (broken/unauthorized access) with a CVSS v3.1 base score of 7.5 (HIGH) and network attack vector with no user inter...

7.5CVSS5.9AI score0.00061EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.3 views

WordPress plugin WeDesignTech Ultimate Booking Addon 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.8CVSS5.8AI score0.00036EPSS
Exploits0References1
Rows per page
Query Builder