← CVE Intelligence

CVE-2026-73395

WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability PUBLISHED

Description (CNA)

Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking System <= 3.2.36 versions.

Affected (CNA)

Vendor / productVersions
wpdevart / Booking calendar, Appointment Booking Systemaffected n/a through 3.2.36

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.