ByteOS Network

CVE Vulnerability Details :

CVE-2026-65468

PUBLISHED

More Info Official Page

Assigner-Patchstack

Assigner Org ID-21595511-bba5-4825-b968-b78d1f9984a3

Published At-23 Jul, 2026 | 11:18

Updated At-23 Jul, 2026 | 11:33

▼CVE Numbering Authority (CNA)

WordPress JetBooking plugin <= 4.1.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in JetBooking <= 4.1.2 versions.

Affected Products

Vendor

Crocoblock. Jetimpex Inc.

Product

JetBooking

Default Status

unaffected

Versions

Affected

From n/a through 4.1.2 (custom)
- -> unaffectedfrom4.1.2.1

Problem Types

Type	CWE ID	Description
CWE	CWE-862	CWE-862 Missing Authorization

Type: CWE

CWE ID: CWE-862

Description: CWE-862 Missing Authorization

Metrics

Version	Base score	Base severity	Vector
3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Version: 3.1

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Impacts

CAPEC ID	Description
CAPEC-180	CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels

CAPEC ID: CAPEC-180

Description: CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels

Solutions

Update the WordPress JetBooking Plugin to the latest available version (at least 4.1.2.1).

Credits

finder

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

References

Hyperlink	Resource
https://patchstack.com/database/wordpress/plugin/jet-booking/vulnerability/wordpress-jetbooking-plugin-4-1-2-broken-access-control-vulnerability?_s_id=cve	vdb-entry

Hyperlink: https://patchstack.com/database/wordpress/plugin/jet-booking/vulnerability/wordpress-jetbooking-plugin-4-1-2-broken-access-control-vulnerability?_s_id=cve

Resource:

vdb-entry

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References