Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-08-26
FoodBoxBooker - Broken Access Control (CVE-2026-18200)
The FoodBoxBooker WordPress plugin before 1.0.8 does not verify that the user account being updated belongs to the user making the request, allowing authenticated users, with Subscriber-level access and above, to modify the profile details of arbitrary users, including administrators.
PLUGIN
FoodBoxBooker
CVE-2026-18200
Risk Score
Threat Entry
Updated 2026-08-26
FoodBoxBooker - Security Vulnerability (CVE-2026-16298)
The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.
PLUGIN
FoodBoxBooker
CVE-2026-16298
Risk Score