Description
Unauthenticated Broken Access Control in Booking Calendar <= 11.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wpdevelop | Booking Calendar | ≤ 11.7 | — |
Medium · 5.3
CVE-2026-74002
EUVD-2026-81515GHSA-p448-cmrg-c3wh
WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability
Published Sep 17, 2026 · Updated Sep 19, 2026 · Assigned by Patchstack