https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T01:32:30.974875+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2025-6814 CVE-2025-6814 — Booking X 1.0 - 1.1.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via export_now() Func… 2026-09-29T01:32:30.976885+00:00

Affected: dunskii Booking X – Appointment and Reservation Availability Calendar

The Booking X plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_now() function in versions 1.0 to 1.1.2. This makes it possible for unauthenticated attackers to download all plugin data, including user accounts, user meta, and PayPal credentials, by issuing a crafted POST request.