CVE-2026-91008

The Event Booking Manager for WooCommerce WordPress plugin, in versions prior to 5.3.8 , is vulnerable to an unauthenticated attendee PII disclosure . The flaw exists because the plugin fails to perform adequate ownership or authorization checks before rendering booking confirmation details. An a...

PT-2026-94175

Name of the Vulnerable Software and Affected Versions Event Booking Manager for WooCommerce versions prior to 5.3.8 Description The plugin fails to perform ownership or authorization checks before rendering booking confirmation details. This allows unauthenticated attackers to retrieve personal...