CVE-2026-16064
CVE-2026-16064
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify authorization on the object being modified when quick-editing events, only checking a global capability, allowing users with the Contributor…
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)