CVE-2026-15229
N/A
N/A
Summary
The Pinpoint Booking System WordPress plugin through 2.9.9.6.9 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbitrary price (including zero) and, by selecting a specific payment method, obtain an instantly-approved reservation.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Pinpoint Booking System | 0 <= 2.9.9.6.9 | affected |
Weaknesses
- CWE-863 Incorrect Authorization
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.