CVE-2026-16986 | Booking Package Plugin up to 1.7.24 on WordPress access control

A vulnerability was found in Booking Package Plugin up to 1.7.24 on WordPress and classified as problematic. Impacted is an unknown function. Executing a manipulation can lead to improper access controls.

This vulnerability is handled as CVE-2026-16986. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More