CVE-2026-27377

The Booking Agent plugin for WordPress versions up to 1.0.16 contains a broken access control vulnerability that could allow unauthorized users to access sensitive functionalities or data. This flaw poses a medium risk, particularly for websites utilizing this plugin for appointment management. WordPress site administrators using the affected version should prioritize applying updates or implementing mitigations to safeguard against potential exploitation.