{"id":"CVE-2026-105997","aliases":[],"title":"Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient","titleSource":"WPScan","descriptionSource":"WPScan","products":[{"vendor":"Unknown","name":"Booking Package","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"1.7.33","versionType":"semver"}],"defaultStatus":"unaffected","source":"WPScan","url":"https://www.cve.org/CVERecord?id=CVE-2026-105997"}],"remediation":[],"description":"The Booking Package WordPress plugin before 1.7.33 does not restrict who can trigger its booking verification-code emails nor bind the recipient to server-side state, allowing unauthenticated users to make the site send templated verification-code emails to arbitrary recipients.","severity":"unknown","score":null,"published":"2026-10-28T06:00:21.342Z","modified":"2026-10-28T06:00:21.342Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://wpscan.com/vulnerability/59ceb45f-eb33-4103-bf75-d68b4f16e824/"],"sources":[{"name":"CVE","id":"CVE-2026-105997","modified":"2026-10-28T06:00:21.342Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-105997"}],"assessments":[],"sourceAffected":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T18:05:32.161Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}