Mmastodon TechnologyCybersecurity first seen 11 h ago, last 11 h ago, peak #12

WordPress Booking Package plugin hit by authorization bypass vulnerability

Original: 🚨 EUVD-2026-100762 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: Booking Package 🏢 Vendor: masaakitanaka 📅 Updated: 2026-10-14

A newly logged vulnerability, EUVD-2026-100762, affects the Booking Package plugin for WordPress by developer masaakitanaka. All versions up to and including 1.7.29 are vulnerable to an authorization bypass, rated 7.5 out of 10 on the CVSS v3.1 scale. The flaw lets attackers bypass access controls in the plugin, and site administrators are urged to check for a patched release.

Why now: WordPress site owners and security teams are alerting each other to a newly disclosed medium-to-high severity plugin flaw.

Booking PackagemasaakitanakaWordPressEUVD-2026-100762

Open on mastodon →

Evidence

• 🚨 EUVD-2026-100762 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: Booking Package 🏢 Vendor: masaakitanaka 📅 Updated: 2026-10-14 📝 The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/2183435