← All advisories

High severity7.3NVD Advisory· Published Aug 13, 2026· Updated Aug 13, 2026

CVE-2026-28188

CVE-2026-28188

Description

Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions.

Affected products

2

WordPress/Hydra Bookinginferred2 versions
<=1.2.2+ 1 more
- (no CPE)range: <=1.2.2
- (no CPE)range: <=1.2.2
Package: https://wordpress.org/plugins/hydra-booking

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/hydra-booking/vulnerability/wordpress-hydra-booking-plugin-1-2-2-broken-access-control-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.