CVE-2026-6960

CriticalCVSS 9.8/10Last modified Jul 23, 2026

Description

The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' function in all versions up to, and including, 5.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Note: The vulnerability can only be exploited if a signature custom field is added to the booking form.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
May 21, 2026
Last modified
Jul 23, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-696007.0Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.CVE-2026-696018.8Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.CVE-2026-696027.5Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.CVE-2026-696038.8Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.CVE-2026-696047.8Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.CVE-2026-696057.0Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally.CVE-2026-696067.0Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.CVE-2026-696077.5Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.CVE-2026-696087.8Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.CVE-2026-696095.5Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.CVE-2026-69617.6Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to sanitize FileInfo.Name CVE-2026-696107.0Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-6960: Critical severity, CVSS 9.8 | Vulnix