CVE-2026-28188

WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions.

Vendor / product	Versions
themefic / Hydra Booking	affected n/a through 1.2.2

CWE-862

CISA-ADP

No English description supplied.

No references supplied.