CVE-2025-14720 | Booking for Appointments and Events Calendar Plugin authorization

January 8, 2026 Yanac

A vulnerability identified as critical has been detected in Booking for Appointments and Events Calendar Plugin up to 1.2.38 on WordPress. The affected element is an unknown function. The manipulation leads to missing authorization.

This vulnerability is documented as CVE-2025-14720. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More