A vulnerability was found in DOTonPAPER Pinpoint Booking System Plugin up to 2.9.9.6.5 on WordPress. It has been declared as critical. This affects an unknown part. Such manipulation leads to missing authorization.

This vulnerability is listed as CVE-2026-39678. The attack may be performed from remote. There is no available exploit.