What is GHSA-5h5h-jh94-gqhv?

GHSA-5h5h-jh94-gqhv is a security advisory published by GitHub Security Advisories with unknown severity. The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke...

Which CVE IDs does GHSA-5h5h-jh94-gqhv cover?

GHSA-5h5h-jh94-gqhv covers the following CVE IDs: CVE-2026-9830. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-5h5h-jh94-gqhvunknown

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke...

Vendor

GitHub Security Advisories

Published

July 27, 2026

Last Modified

July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-9830 →

📋 Description

The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-9830
https://wpscan.com/vulnerability/5fded411-52fd-4dc5-9a23-b77fcd9cfed2
https://github.com/advisories/GHSA-5h5h-jh94-gqhv