Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-39678 EUVD-2026-20359GHSA-8ppv-64cq-c7jh

WordPress Pinpoint Booking System plugin <= 2.9.9.7.2 - Broken Access Control vulnerability

Published Apr 8, 2026 · Updated Oct 8, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Pinpoint Booking System Pinpoint Booking System booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinpoint Booking System: from n/a through 2.9.9.7.2.

Affected products

VendorProductAffectedFixed
Pinpoint Booking System Pinpoint Booking System ≤ 2.9.9.7.2 —

References