CVE-2026-91008

CVE-2026-91008 affects the Event Booking Manager for WooCommerce WordPress plugin in versions before 5.3.8 . The root cause is a missing ownership or authorization check before rendering booking confirmation details. This allows unauthenticated attackers to retrieve registered attendees' personal...