CVE-2026-105992
Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation Bypass
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the payment provider before marking it paid and confirmed, allowing unauthenticated attackers to mark bookings as paid without paying.
| Vendor | unknown |
| Product | ettrick escape room booking |
| Published | Oct 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown ettrick escape room booking
Be the first to know when new unknown vulnerabilities affecting unknown ettrick escape room booking are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Ettrick Escape Room Booking
0 < 1.3.1
References
Credits
ryan fabella WPScan