CVE-2026-105193

The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient entropy, deriving each from a low-entropy time-seeded value, which can allow unauthenticated attackers who are able to determine a booking's creation time to predict the hash and then...

PT-2019-6806 · Frederick Townes · W3 Total Cache

Name of the Vulnerable Software and Affected Versions: W3 Total Cache versions prior to 0.9.2.5 Description: The issue allows remote attackers to predict the values of hashes due to insecure hash key generation. Recommendations: For versions prior to 0.9.2.5, update to version 0.9.2.5 or later to...