CVE-2026-14831
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Aug 06, 2026
Vendor
unknown
Description
The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when adding to cart and calculating the booking price, allowing unauthenticated users to place below-minimum bookings and complete underpriced orders.