PT-2026-23261 · Designthemes · Designthemes Booking Manager

Phat Rio · Publicado 2026-03-05 · Atualizado 2026-03-05 · CVE-2026-27388

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions DesignThemes Booking Manager versions prior to 2.1

Description An authorization issue exists in DesignThemes Booking Manager that allows exploitation of incorrectly configured access control security levels.

Recommendations Update DesignThemes Booking Manager to version 2.1 or later.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-27388

Produtos afetados

Designthemes Booking Manager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-27388 · Nota de Segurança
• https://twitter.com/CVEnew/status/2029654769476735449 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Plugin/designthemes-booking-manager/vulnerability/wordpress-designthemes-booking-manager-plugin-2-0-broken-access-control-vulnerability?_s_id=cve · Nota