Skip to content

CVE-2026-15070

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
July 10, 2026
Last Seen
July 10, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Two high severity vulnerabilities, CVE-2026-15070 and CVE-2026-15005, have been identified in WordPress plugins. CVE-2026-15070 affects the Salon Booking System plugin, allowing unauthenticated attackers to execute arbitrary PHP code via Cross-Site Request Forgery due to improper nonce validation. C...

Public Exploits

Checking GitHub for proof-of-concept code…