CVE-2026-91025 | Booking Manager Plugin up to 2.1.20 on WordPress authorization

September 23, 2026 Yanac

A vulnerability was found in Booking Manager Plugin up to 2.1.20 on WordPress. It has been declared as critical. Affected by this vulnerability is an unknown functionality. Such manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-91025. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More