PULSE
ESPT
FEED
ransomscarlettgroup reclama a rrh.org · Healthcareransomn0n reclama a Company #197 · USransomn0n reclama a Company #196 · USransomn0n reclama a Company #195 · USransomn0n reclama a Company #194 · USransomn0n reclama a Company #193 · USransomn0n reclama a Company #192 · USransomn0n reclama a Company #191 · USransomn0n reclama a Company #190 · CAransomn0n reclama a Company #189 · GBransomn0n reclama a Company #188 · USransomn0n reclama a Company #187 · CAransomn0n reclama a Company #186 · CAransomn0n reclama a Company #185 · USransomscarlettgroup reclama a rrh.org · Healthcareransomn0n reclama a Company #197 · USransomn0n reclama a Company #196 · USransomn0n reclama a Company #195 · USransomn0n reclama a Company #194 · USransomn0n reclama a Company #193 · USransomn0n reclama a Company #192 · USransomn0n reclama a Company #191 · USransomn0n reclama a Company #190 · CAransomn0n reclama a Company #189 · GBransomn0n reclama a Company #188 · USransomn0n reclama a Company #187 · CAransomn0n reclama a Company #186 · CAransomn0n reclama a Company #185 · US
← All CVEs
CVE WatchNov 9, 2026

CVE-2026-81422

The Advanced Appointment Booking & Scheduling WordPress plugin before 2.7 does not verify the site's user-registration setting before creati

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Nov 9, 2026 · Last modified: Nov 9, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

The Advanced Appointment Booking & Scheduling WordPress plugin before 2.7 does not verify the site's user-registration setting before creating accounts through a publicly accessible shortcode, allowing unauthenticated attackers to register arbitrary user accounts, and be automatically logged in, even when user registration is disabled on the site.

Official references
Related CVEs

No related CVEs by CWE or product.