CVE-2026-14322 – Timetics < 1.0.57 – Unauthenticated Booking Auto-Approval via Arbitrary payment_method

CVE ID :CVE-2026-14322

Published : July 22, 2026, 7:16 a.m. | 29 minutes ago

Description :The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created through a payment method other than its recognised gateways, allowing unauthenticated users to create fully-approved bookings for priced appointments without making any payment.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…