CVE-2026-105992: Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation Bypass

Q: Who can exploit this issue?

An unauthenticated attacker can exploit it; no account or completed payment is required according to the available information.

Q: Which deployments are affected?

Ettrick Escape Room Booking versions before 1.3.1 are affected. The provided data does not identify any configuration prerequisite or mitigation setting.

Q: What is the impact of successful exploitation?

An attacker can cause bookings to be marked as paid and confirmed without the payment status being verified with the payment provider.

Published Oct 21, 2026

Updated

The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the payment provider before marking it paid and confirmed, allowing unauthenticated attackers to mark bookings as paid without paying.

Affected Software

1 affected component

Ettrick Escape Room Booking<1.3.1

Event History

Oct 21, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated attacker can exploit it; no account or completed payment is required according to the available information.

Which deployments are affected?

Ettrick Escape Room Booking versions before 1.3.1 are affected. The provided data does not identify any configuration prerequisite or mitigation setting.

What is the impact of successful exploitation?

An attacker can cause bookings to be marked as paid and confirmed without the payment status being verified with the payment provider.

CVE-2026-105992: Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation Bypass

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What is the impact of successful exploitation?