CVE-2026-74002

Unauthenticated Broken Access Control in Booking Calendar <= 11.7 versions.

Published Sep 17, 2026
CVSS 5.3 medium
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

WPdevelop Booking Calendar

CVE-2026-74002 at the National Vulnerability Database