We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2026-15229

CVE-2026-15229

WordPress

Severity: —
CVSS: —CVSS
Published: 2026-08-10
Last modified: 2026-08-10

Description

The Pinpoint Booking System WordPress plugin through 2.9.9.6.9 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbitrary price (including zero) and, by selecting a specific payment method, obtain an instantly-approved reservation.

References

https://wpscan.com/vulnerability/be12c266-dee7-463d-ae71-9f7b7e0258ee/

Summary

Description

References