CVE-2026-27405

CVE-2026-27405 concerns the WordPress plugin WpBookingly (Magepeople Inc.) up to version 1.2.9, where a Missing Authorization vulnerability enables broken access control. The issue affects WpBookingly 1.2.9 and earlier, with CVSS v3.1 base score 6.5 (Medium) and an attack vector over network. The...