33CVE-2026-116557murgroland WP Booking System – Booking Calendar · WP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX ActionIgnore reportBlock vendor9.10.3%