Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:33:17 +0000 CVE-2026-15151 — Five Star Restaurant Reservations < 2.7.23 - Booking Manager+ Missing Authorization via rtb_reset_notifications https://vulnerability.circl.lu/vuln/cve-2026-15151 <p><strong>Affected:</strong> Unknown Five Star Restaurant Reservations</p> <p>The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role (which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23&#39;s settings) to reset the site&#39;s configured booking notification rules.</p> <p><strong>Affected:</strong> Unknown Five Star Restaurant Reservations</p> <p>The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role (which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23&#39;s settings) to reset the site&#39;s configured booking notification rules.</p> https://vulnerability.circl.lu/vuln/cve-2026-15151