Unknown Appointment Booking Calendar Plugin and Scheduling Plugin

• CVE-2026-76586 High 7.5 BookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation via PayPal Payment Confirmation 0.4%
• CVE-2026-12378 High 8.1 BookingPress <= 1.1.28 - Unauthenticated PHP Object Injection 0.6%
• CVE-2024-12274 High 7.5 BookingPress < 1.1.23 - Unauthenticated Export File Download 0.6%