PT-2026-95278

The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 via the wpbc ajax option save AJAX action. The vulnerability exists because the handle ajax save function applies per-option safeguards only to names explicitly registered...