Description
Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking System <= 3.2.36 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wpdevart | Booking calendar, Appointment Booking System | ≤ 3.2.36 | — |
Medium · 6.5
CVE-2026-73395
EUVD-2026-60801GHSA-wrj4-qvh9-mx4r
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack