medium5.3
CVE-2026-14322
The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created through a payment method other than its recogn…
Impact
The Timetics WordPress plugin before 1.0.57 does not enforce a pending or unpaid status for new bookings created through a payment method other than its recognised gateways, allowing unauthenticated users to create fully-approved bookings for priced appointments without making any payment.
Affected products
| Product | Affected versions |
|---|---|
| Timetics WordPress Plugin | before 1.0.57 |
Versions were read from the advisory text. No structured product data has been published for this record yet.