What is GHSA-hfw9-fm9r-jwrp?

GHSA-hfw9-fm9r-jwrp is a security advisory published by GitHub Security Advisories with Medium severity. The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require...

Which CVE IDs does GHSA-hfw9-fm9r-jwrp cover?

GHSA-hfw9-fm9r-jwrp covers the following CVE IDs: CVE-2026-14216. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hfw9-fm9r-jwrp?

GHSA-hfw9-fm9r-jwrp has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-hfw9-fm9r-jwrpMediumCVSS 6.5

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require...

Vendor

GitHub Security Advisories

Published

August 26, 2026

Last Modified

August 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-14216 →

📋 Description

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification queue, allowing an unauthenticated user to force the dispatch of queued notifications and integration callbacks.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14216
https://wpscan.com/vulnerability/c38bf5b3-902c-4126-a9a3-42d9f2d359c3
https://github.com/advisories/GHSA-hfw9-fm9r-jwrp