What is the CVSS score of CVE-2026-59532?

CVE-2026-59532 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.3%.

Booking And Rental Manager CVE-2026-59532

EUVD-2026-49208 HIGH

Improper Validation of Specified Quantity in Input (CWE-1284)

2026-07-27 Patchstack

GHSA-qw7x-5wxq-5xxq

Information Disclosure Booking And Rental Manager

7.5

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from Vendor (Patchstack) · only source for this CVE.

CVSS VectorVendor: Patchstack

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 17:05 vuln.today

CVE Published

Jul 27, 2026 - 13:59 cve.org

HIGH 7.5

DescriptionCVE.org

Unauthenticated Other Vulnerability Type in Booking and Rental Manager <= 2.7.2 versions.

AnalysisAI

Price manipulation in the Booking and Rental Manager WordPress plugin (versions <=2.7.2) allows unauthenticated attackers to modify booking prices due to improper validation of input quantities (CWE-1284). The vulnerability enables remote attackers to alter pricing without authentication or user interaction, potentially leading to financial loss or fraudulent bookings. No evidence of active exploitation or publicly available exploit code exists at time of analysis.