[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vulnerability-29919":3,"all-banners":35,"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0":97,"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU":104,"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU":110},{"id":4,"detectable_with":5,"vuln_details":12,"vuln_id":32,"name":33,"published":34,"updated":13},29919,{"tool":6,"engine":9},{"id":7,"name":8},1,"Network Scanner",{"id":10,"name":11},2,"Nuclei",{"id":4,"codename":13,"description":13,"severity":14,"risk_description":15,"public_description":16,"public_recommendation":17,"recommendation":13,"references":18,"cvssv3":23,"epss_score":24,"epss_percentile":25,"cve":26,"in_cisa_catalog":28,"date":29,"software_type":13,"vendor":30,"product":31,"ptt_exploit_capabilities":13},null,"high","Attackers can access sensitive customer PII including names, emails, phone numbers, and booking details, compromising user privacy and data confidentiality.","WP Booking System – Booking Calendar plugin for WordPress \u003C= 2.1.0.3 contains an authorization bypass caused by improper user authorization verification, letting unauthenticated attackers read stored notification emails exposing customer PII, exploit requires authenticated Subscriber-level user.","Update to the latest version beyond 2.1.0.3.",[19,20,21,22],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fwordpress-plugins\u002Fwp-booking-system\u002Fwp-booking-system-2103-missing-authorization-to-unauthenticated-email-log-disclosure","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset\u002F3750085\u002Fwp-booking-system","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-booking-system\u002F","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-108123",7.5,0.00318,0.2447,[27],"CVE-2026-108123",false,"2026-10-17T00:00:00Z","wpbookingsystem","wp-booking-system","NETSCAN-NUCLEI-CVE-CVE-2026-108123","WP Booking System \u003C= 2.1.0.3 - Unauthenticated Email Log Disclosure","2026-10-28T00:00:00Z",[36,47,56,62,70,77],{"title":37,"slug":38,"text":39,"link":40,"external":41,"targets":42,"cta":45,"variant":46,"campaign_id":38},"Office Hours #14","office-hours-14","[Live Office Hours, Wed Oct 28] Check, patch, prove: PHP2Shell and other critical CVEs","https:\u002F\u002Fzoom.us\u002Fwebinar\u002Fregister\u002F5117815316917\u002FWN_xbwerEx9QFSjfNWIHcjtHw",true,[43,44],"\u002Fwebinars\u002Foffice-hours","\u002Fwebinars","Save your spot","secondary",{"title":48,"slug":49,"text":50,"link":51,"external":41,"targets":52,"cta":54,"variant":46,"campaign_id":55},"PHP2Shell detection - WP Scanner","php2shell-rce-pricing-1","Detect PHP2Shell with the WP Scanner! Available with every paid plan","https:\u002F\u002Fpentest-tools.com\u002Fpricing",[53],"\u002Fcms-vulnerability-scanning\u002Fwordpress-scanner-online-wpscan","See pricing options","php2shell-rce",{"title":57,"slug":58,"text":59,"link":13,"external":28,"targets":60,"cta":13,"variant":46,"campaign_id":55},"PHP2Shell & Node2Shell detection - pricing page","php2shell-rce-pricing","PHP2Shell & Node2Shell detection live in every paid plan (unlimited rescans for patch validation)",[61],"\u002Fpricing",{"title":63,"slug":64,"text":65,"link":51,"external":41,"targets":66,"cta":54,"variant":46,"campaign_id":64},"Node2Shell detection - Vuln DB homepage, product, CVE page","node2shell","🚨 Detect Node2Shell with any paid plan. Get proof now",[67,68,69],"\u002Fvulnerabilities-exploits","\u002Fproduct","\u002Fvulnerabilities-exploits\u002Fnode2shell-brotli-decoder-remote-code-execution_29896",{"title":71,"slug":72,"text":73,"link":51,"external":41,"targets":74,"cta":76,"variant":46,"campaign_id":55},"PHP2Shell detection - NetScan on the NS page","php2shell-rce-netscan","🚨 Detect Node2Shell + PHP2Shell with NetScan (from $96\u002Fmo for 16 assets)",[75],"\u002Fnetwork-vulnerability-scanning\u002Fnetwork-security-scanner-online","Pick NetScan",{"title":78,"slug":55,"text":79,"link":51,"external":41,"targets":80,"cta":54,"variant":46,"campaign_id":55},"PHP2Shell detection - top pages, pricing CTA","🚨 Detect Node2Shell + PHP2Shell with any paid plan. Get proof",[81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96],"\u002F","\u002Fport-scanner-online-nmap","\u002Fwebsite-vulnerability-scanning\u002Fwebsite-scanner","\u002Ffind-subdomains-of-domain","\u002Fdiscover-hidden-directories-and-files","\u002Fvulnerabilities-exploits\u002Fphp2shell-remote-code-execution-cve-2026-109618-and-cve-2026-109619_29870","\u002Ffor\u002Ffree","\u002Ffeatures\u002Fattack-surface","\u002Ffeatures\u002Fauthenticated-web-app-scanning","\u002Ffeatures\u002Finternal-network-scanning","\u002Ffeatures\u002Fvulnerability-monitoring","\u002Ffeatures\u002Fvulnerability-assessment-reporting","\u002Ffeatures\u002Fpentest-reporting","\u002Fsolutions\u002Ffor-it-teams","\u002Fsolutions\u002Ffor-msps","\u002Fsolutions\u002Ffor-security-teams",["Island",98],{"key":99,"params":100,"result":102},"SkipToContent_34xgpJIRRkpiT6ls6jE4NHf7VpvQCQBEwi69exi4oT0",{"props":101},"{}",{"head":103},{},["Island",105],{"key":106,"params":107,"result":108},"FooterNav_JsYsxvLufb1W12aeknKZ89on0MD0bNDTiB5EYxyxmU",{"props":101},{"head":109},{},["Island",111],{"key":112,"params":113,"result":115},"FooterSocial_u16tCafBUeGMoDrdLfTINytP2JB5msc6iB3VDUutAoU",{"props":114},"{\"text-color\":\"gray\"}",{"head":116},{}]