Overwriting Booktics Customer Details Without Logging In
CVE-2026-11446: a public booking request could overwrite an existing Booktics customer's contact details using only their email address.
$ topic
CVE-2026-11446
Research on CVE-2026-11446, the unauthenticated customer-contact overwrite in the Booktics WordPress booking plugin.