CVE-2026-92421

CVE-2026-92421 affects the Hydra Booking — Appointment Scheduling & Booking Calendar WordPress plugin, versions 1.1.0 through below 1.2.3 . The root cause is a missing ownership verification check on host records (IDOR ): the plugin does not confirm that the host record being modified belongs to ...