← All advisories

High severity7.3NVD Advisory· Published Aug 13, 2026· Updated Aug 14, 2026

CVE-2026-28188

CVE-2026-28188

Description

Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Hydra Bookinginferred2 versions
<=1.2.2+ 1 more
- (no CPE)range: <=1.2.2
- (no CPE)range: <=1.2.2
Package: https://wordpress.org/plugins/hydra-booking

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/hydra-booking/vulnerability/wordpress-hydra-booking-plugin-1-2-2-broken-access-control-vulnerabilitynvd

News mentions

1

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 10, 2026 to August 16, 2026)
Wordfence Blog · Aug 21, 2026