{
 "id": "WPSEC-2026-2292",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2292/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2292/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2292/index.md",
 "title": "Advanced Appointment Booking & Scheduling <= 2.6 - Unauthenticated Missing Authorization to User Registration Bypass via [appointment_register_form] Shortcode",
 "description": "The Advanced Appointment Booking & Scheduling plugin for WordPress is vulnerable to unauthorized user registration via the [appointment_register_form] shortcode in all versions up to, and including, 2.6, due to the registration handler not checking the site's 'Anyone can register' (users_can_register) setting before calling wp_insert_user. This makes it possible for unauthenticated attackers to create and log in to new user accounts with the site's default role even when the administrator has disabled user registration. The plugin publishes a 'Register' page containing this shortcode when it is activated.",
 "plugin": {
  "slug": "advanced-appointment-booking-scheduling",
  "name": "Advanced Appointment Booking & Scheduling",
  "full_name": "Advanced Appointment Booking & Scheduling",
  "wordpress_org": "https://wordpress.org/plugins/advanced-appointment-booking-scheduling/",
  "advisories_url": "https://wpsec.com/vuln/plugin/advanced-appointment-booking-scheduling/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/advanced-appointment-booking-scheduling"
 },
 "type": "NO AUTHORISATION",
 "cwe": [
  "CWE-862"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "2.7",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 2.7"
  ]
 },
 "introduced_in": null,
 "fixed_in": "2.7",
 "remediation": "Update to 2.7 or later.",
 "fix_released": "2026-11-02T08:29:03+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:31:36.662961+00:00",
 "also_published_as": {
  "source": null,
  "cve": [
   "CVE-2026-81422"
  ],
  "published": "2026-11-06T10:12:15+00:00"
 },
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2292/",
  "https://plugins.svn.wordpress.org/advanced-appointment-booking-scheduling/tags/2.7/",
  "https://wordpress.org/plugins/advanced-appointment-booking-scheduling/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/advanced-appointment-booking-scheduling",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-11-03"
 }
}