https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T15:56:09.082902+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-105193 fkie_cve-2026-105193 2026-10-09T15:56:09.098634+00:00

The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient entropy, deriving each from a low-entropy time-seeded value, which can allow unauthenticated attackers who are able to determine a booking's creation time to predict the hash and then read that booking's personal data or modify the booking in place.

 https://vulnerability.circl.lu/vuln/ghsa-x92h-fpqj-5752 GHSA-x92h-fpqj-5752 2026-10-09T15:56:09.098737+00:00

The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient entropy, deriving each from a low-entropy time-seeded value, which can allow unauthenticated attackers who are able to determine a booking's creation time to predict the hash and then read that booking's personal data or modify the booking in place.