89 matches found
CVE-2026-107416
Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.2...
CVE-2026-107416 WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.2...
EUVD-2026-102047
Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.2...
CVE-2026-107416
The Webba Booking WordPress plugin (webba-booking-lite ) version 6.5.2 and below is vulnerable to an Authorization Bypass Through User-Controlled Key vulnerability. The root cause is Incorrectly Configured Access Control Security Levels , which leads to Insecure Direct Object References (IDOR) . ...
CVE-2026-107416: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.2...
WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by HyeonMin Kim in WordPress Plugin Webba Booking versions = 6.5.2...
CVE-2026-97079
Subscriber Insecure Direct Object References IDOR in Webba Booking = 6.5.0 versions...
CVE-2026-97079
The Webba Booking WordPress plugin (versions
CVE-2026-97079 WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in Webba Booking = 6.5.0 versions...
CVE-2026-97079 WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability
Subscriber Insecure Direct Object References IDOR in Webba Booking = 6.5.0 versions...
EUVD-2026-89897
Subscriber Insecure Direct Object References IDOR in Webba Booking = 6.5.0 versions...
CVE-2026-97079: Authorization Bypass Through User-Controlled Key
Subscriber Insecure Direct Object References IDOR in Webba Booking = 6.5.0 versions...
PT-2026-103229
Subscriber Insecure Direct Object References IDOR in Webba Booking = 6.5.0 versions...
WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by sungbyeongchan in WordPress Plugin Webba Booking versions = 6.5.0...
CVE-2026-27409
Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from n/a through 6.4.13...
CVE-2026-27409 WordPress Webba Booking plugin <= 6.4.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from n/a through 6.4.13...
EUVD-2026-41055
Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from n/a through 6.4.13...
CVE-2026-27409
Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from n/a through 6.4.13...
CVE-2026-27409
CVE-2026-27409 : Missing Authorization in Webba Booking for WordPress (plugin)
CVE-2026-27409 WordPress Webba Booking plugin <= 6.4.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from n/a through 6.4.13...