CVE-2026-107616 | melograno Booking for Appointments and Events Calendar Plugin Command handle improper authorization (EUVD-2026-119040)

A vulnerability, which was classified as problematic, was found in melograno Booking for Appointments and Events Calendar Plugin up to 9.9.1 on WordPress. The affected element is the function GetEventAttendeesCommandHandler::handle of the component Command Handler. The manipulation of the argument ID results in improper authorization.

This vulnerability is cataloged as CVE-2026-107616. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More