PatchSiren

DOTonPAPER CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM DOTonPAPER CVE published 2026-04-08

CVE-2026-39678

CVE-2026-39678 is a Missing Authorization vulnerability in the DOTonPAPER Pinpoint Booking System booking-system plugin, affecting versions from n/a through <= 2.9.9.6.5. This issue allows Exploiting Incorrectly Configured Access Control Security Levels, with a CVSS score of 5.3 and a severity of MEDIUM. The vulnerability is caused by a Missing Authorization issue in the DOTonPAPER Pinpoint Booking System [truncated]