What is CVE-2026-14831?

CVE-2026-14831 is a medium-severity vulnerability in Easy Booking, classified under CWE-602. CVSS score: 5.3/10. Published 2026-08-06.

How severe is CVE-2026-14831?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Easy Booking

CVE-2026-14831

The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bookable product's configured minimum booking duration on the server side when adding to cart and calculating the booking price, allowing unauthenticated users to place b…

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Unknown Easy Booking — versions 0

Weakness classification (CWE)

CWE-602

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-14831?: CVE-2026-14831 is a medium-severity vulnerability in Easy Booking, classified under CWE-602. CVSS score: 5.3/10. Published 2026-08-06.
How severe is CVE-2026-14831?: Medium severity. CVSS v3 base score is 5.3 out of 10.