CVE-2026-15229

The Pinpoint Booking System WordPress plugin (versions through 2.9.9.7.1 ) contains a vulnerability where the booking price is not validated on the server side. This flaw allows unauthenticated users to create bookings at an arbitrary price , such as zero. By selecting a specific payment method, ...

CVE-2026-15229 Pinpoint Booking System <= 2.9.9.7.1 - Unauthenticated Arbitrary Booking Price Manipulation

The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbitrary price including zero and, by selecting a specific payment method, obtain an instantly-approved reservation...