Live › vulnerability › CVE-2026-115614
Go to dashboardThe Booking and Rental Manager plugin for WooCommerce, by Magepeople, has a missing authorization check that lets a user perform actions they should not be allowed to. The sources do not say which data or actions are exposed, so the exact impact is unclear.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 10:29 UTC. All times on this page are UTC.
Sites running the Booking and Rental Manager plugin for WooCommerce at version or older are in scope. The sources do not describe which roles or settings make a site exposed, so exposure beyond the installed version is unknown.
2.8.2No product ranges from the sources yet.
booking-and-rental-manager-for-woocommerce in the WordPress admin under Plugins; affected versions are listed as through 2.8.2.booking-and-rental-manager-for-woocommerce to a version later than 2.8.2, if the vendor has released one (unknown from the sources).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through 2.8.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-115614")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.