{
 "id": "WPSEC-2026-0975",
 "url": "https://wpsec.com/vuln/WPSEC-2026-0975/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-0975/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-0975/index.md",
 "title": "Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment <= 2.8.0 - Unauthenticated Price Manipulation via Booking Form Quantity Parameters",
 "description": "The Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment plugin for WordPress is vulnerable to price manipulation via the quantity values posted from the booking forms (such as room, rental type and extra service quantities) in all versions up to, and including, 2.8.0. This is due to insufficient validation that submitted quantities are non-negative whole numbers before they are multiplied into the booking price. This makes it possible for unauthenticated attackers to add bookings to the cart with fractional or negative quantities, so that a booking is priced at a fraction of its real value, at zero or below.",
 "plugin": {
  "slug": "booking-and-rental-manager-for-woocommerce",
  "name": "Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment",
  "full_name": "Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment",
  "wordpress_org": "https://wordpress.org/plugins/booking-and-rental-manager-for-woocommerce/",
  "advisories_url": "https://wpsec.com/vuln/plugin/booking-and-rental-manager-for-woocommerce/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/booking-and-rental-manager-for-woocommerce"
 },
 "type": "BYPASS",
 "cwe": [
  "CWE-1284"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "2.8.1",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 2.8.1"
  ]
 },
 "introduced_in": null,
 "fixed_in": "2.8.1",
 "remediation": "Update to 2.8.1 or later.",
 "fix_released": "2026-10-14T05:06:31+00:00",
 "published": "2026-10-15T05:49:52+00:00",
 "updated": "2026-10-14T19:37:31.393063+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-0975/",
  "https://plugins.svn.wordpress.org/booking-and-rental-manager-for-woocommerce/tags/2.8.1/",
  "https://wordpress.org/plugins/booking-and-rental-manager-for-woocommerce/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/booking-and-rental-manager-for-woocommerce",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "None seen",
  "as_of": "2026-10-15"
 }
}