Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 08:15:21 +0000 CVE-2026-105998 — Booking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing Authorization https://db.gcve.eu/vuln/cve-2026-105998 <p><strong>Affected:</strong> Unknown Booking Package</p> <p>The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting its premium subscription state, allowing unauthenticated attackers to disable the Booking Package WordPress plugin before 1.7.31&#39;s paid features.</p> <p><strong>Affected:</strong> Unknown Booking Package</p> <p>The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting its premium subscription state, allowing unauthenticated attackers to disable the Booking Package WordPress plugin before 1.7.31&#39;s paid features.</p> https://db.gcve.eu/vuln/cve-2026-105998