CVE-2026-92420

Hydra Booking — Appointment Scheduling & Booking Calendar (WordPress plugin) versions before 1.2.2 are affected by an IDOR vulnerability. Two booking endpoints fail to verify that a booking belongs to the requesting user before performing modifications or deletions. As a result, a booking-provide...