Ettrick Escape Room Booking CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review Ettrick Escape Room Booking CVE published 2026-10-21

CVE-2026-105992

CVE-2026-105992 is a vulnerability in the Ettrick Escape Room Booking WordPress plugin before version 1.3.1. The plugin does not verify a booking's payment status against the payment provider before marking it paid and confirmed. This allows unauthenticated attackers to mark bookings as paid without paying. Defenders responsible for WordPress installations with the Ettrick Escape Room Booking plugin shoul [truncated]