Vulnerability in Pinpoint Booking System
CVE-2026-15229
The Pinpoint Booking System WordPress plugin through 2.9.9.6.9 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbitrary price (including zero) and, by selecting a specific p…
Affected products
- Unknown Pinpoint Booking System — versions 0
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)