PT-2026-63329 · WordPress · Events Booking

Phil Taylor

·

CVE-2026-63047

·

Published

2026-07-22

·

Updated

2026-07-22

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Events Booking versions 5.0.0 through 5.8.1
Description An incorrect Access Control List (ACL) check—a mechanism used to define permissions for users—allows an actor to download invoice information without proper verification of their authorization.
Recommendations Update Events Booking to version 5.8.1 or later.

Fix

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-63047

Affected Products

Events Booking