What is GHSA-v6g6-7m7c-3mx6?

GHSA-v6g6-7m7c-3mx6 is a security advisory published by GitHub Security Advisories with Medium severity. The Appointment Booking Plugin WordPress plugin before 5.6.8 does not restrict which booking...

Which CVE IDs does GHSA-v6g6-7m7c-3mx6 cover?

GHSA-v6g6-7m7c-3mx6 covers the following CVE IDs: CVE-2026-15250. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-v6g6-7m7c-3mx6?

GHSA-v6g6-7m7c-3mx6 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-v6g6-7m7c-3mx6MediumCVSS 5.3

The Appointment Booking Plugin WordPress plugin before 5.6.8 does not restrict which booking...

Vendor

GitHub Security Advisories

Published

July 30, 2026

Last Modified

July 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-15250 →

📋 Description

The Appointment Booking Plugin WordPress plugin before 5.6.8 does not restrict which booking fields an unauthenticated visitor can set through its public booking funnel, allowing an unauthenticated user to assign a privileged booking field such as the approval status and thereby bypass the site's booking approval workflow.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-15250
https://wpscan.com/vulnerability/2609e202-9be3-42b0-a1fb-ace310b93bd0
https://github.com/advisories/GHSA-v6g6-7m7c-3mx6