https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-28T21:21:45.422317+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-jf6v-v63c-q8q2 GHSA-jf6v-v63c-q8q2 2026-10-28T21:21:45.423751+00:00

The Booking Package WordPress plugin before 1.7.33 does not restrict who can trigger its booking verification-code emails nor bind the recipient to server-side state, allowing unauthenticated users to make the site send templated verification-code emails to arbitrary recipients.