<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 07 Jun 2026 18:32:51 +0000</lastBuildDate>
    <item>
      <title>7ac5a4f9-68a7-4f7e-befe-f9ac30d20778</title>
      <link>https://db.gcve.eu/sighting/7ac5a4f9-68a7-4f7e-befe-f9ac30d20778/export</link>
      <description>{"uuid": "7ac5a4f9-68a7-4f7e-befe-f9ac30d20778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-7350", "type": "seen", "source": "https://t.me/cvedetector/2747", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-7350 - WordPress BookingPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-7350 \nPublished : Aug. 8, 2024, 3:15 a.m. | 38\u00a0minutes ago \nDescription : The Appointment Booking Calendar Plugin and Online Scheduling Plugin \u2013 BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user's identity prior to logging them in when completing a booking. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if they have access to that user's email.  This is only exploitable when the 'Auto login user after successful booking' setting is enabled. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T06:21:38.000000Z"}</description>
      <content:encoded>{"uuid": "7ac5a4f9-68a7-4f7e-befe-f9ac30d20778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-7350", "type": "seen", "source": "https://t.me/cvedetector/2747", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-7350 - WordPress BookingPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-7350 \nPublished : Aug. 8, 2024, 3:15 a.m. | 38\u00a0minutes ago \nDescription : The Appointment Booking Calendar Plugin and Online Scheduling Plugin \u2013 BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user's identity prior to logging them in when completing a booking. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if they have access to that user's email.  This is only exploitable when the 'Auto login user after successful booking' setting is enabled. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T06:21:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/7ac5a4f9-68a7-4f7e-befe-f9ac30d20778/export</guid>
      <pubDate>Thu, 08 Aug 2024 06:21:38 +0000</pubDate>
    </item>
  </channel>
</rss>
