WordPress WP Booking System Authorization Vulnerability

The WordPress Booking System 2.1.0.3 and earlier versions have a vulnerability related to authorization issues. This vulnerability stems from the exposure of sensitive information through the ‘id’ parameter. It may allow authenticated attackers with privileges at the subscriber level or higher to...

WordPress WP Booking System Authorization Vulnerability

The WordPress Booking System 2.1.0.3 and earlier versions have an authorization issue vulnerability. This vulnerability arises from plugins not properly verifying whether a user is authorized to perform a certain action. As a result, authenticated attackers with permissions for subscribers or...

WordPress WP Booking System Authorization Vulnerability

The WordPress Booking System 2.1.0.3 and earlier versions have a vulnerability related to authorization. This vulnerability arises from plugins that do not properly verify whether the user has the necessary permissions to perform certain actions. As a result, unauthenticated attackers can read th...

WordPress Booking System SQL Injection Vulnerability

The WordPress Booking System 2.1.0.1 and earlier versions have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the parameter dataorderby and inadequate preparation of existing SQL queries. It is possible for authenticated attackers with administrator or highe...

WordPress Booking System SQL Injection Vulnerability

The WordPress Booking System 2.1.0.1 and earlier versions have a SQL injection vulnerability. This vulnerability arises from insufficient escaping of the currentmonth parameter provided to users, as well as inadequate preparation of existing SQL queries. This leads to time-based SQL injections...

EUVD-2026-48162

Subscriber Broken Access Control in WP Booking System 5.12.8.1 versions...

CVE-2025-68515

Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP Booking System: from n/a through = 2.0.19.12...

EUVD-2025-208300

Insertion of Sensitive Information Into Sent Data vulnerability in Roland Murg WP Booking System wp-booking-system allows Retrieve Embedded Sensitive Data.This issue affects WP Booking System: from n/a through = 2.0.19.12...

CVE-2025-58213 WordPress Booking System Trafft Plugin <= 1.0.14 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ameliabooking Booking System Trafft booking-system-trafft allows Stored XSS.This issue affects Booking System Trafft: from n/a through = 1.0.14...

WordPress plugin WP Booking System has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. WordPress plugin WP Booking System...

PT-2019-12710 · WordPress · Wp Booking System

Name of the Vulnerable Software and Affected Versions: WP Booking System plugin version 1.5.1 Description: The issue is related to the lack of CSRF protection, which can allow attackers to exploit certain SQL injection issues that require administrative access. Recommendations: For WP Booking...