Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-03-11
CVE-2026-1920 - Booktics – Booking Calendar for Appointments and Service Businesses Plugin
The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'Extension_Controller::update_item_permissions_check' function in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to install addon plugins.
PLUGIN
Booktics – Booking Calendar for Appointments and Service Businesses
CVE-2026-1920
Risk Score
Threat Entry
Updated 2026-03-11
CVE-2026-1919 - Booktics – Booking Calendar for Appointments and Service Businesses Plugin
The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple REST API endpoints in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to query sensitive data.
PLUGIN
Booktics – Booking Calendar for Appointments and Service Businesses
CVE-2026-1919
Risk Score