Unrated severityNVD Advisory· Published Aug 10, 2026

CVE-2026-16298

Description

The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site takeover.

Affected products

WordPress/FoodBoxBookerllm-fuzzy
Range: <1.0.7

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/d554361c-e6c7-4843-a9cc-005b08685a5b/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000