110 matches found
WordPress Booking Package plugin < 1.7.31 - Unauthenticated Calendar Account Information Disclosure vulnerability
Unauthenticated Calendar Account Information Disclosure vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin Booking Package versions 1.7.31...
WordPress Booking Package plugin < 1.7.31 - Unauthenticated Subscription Deactivation vulnerability
Unauthenticated Subscription Deactivation vulnerability discovered by Md. Minaruzzaman Shovon in WordPress Plugin Booking Package versions 1.7.31...
WordPress WP Booking System Authorization Vulnerability
The WordPress Booking System 2.1.0.3 and earlier versions have a vulnerability related to authorization. This vulnerability arises from plugins that do not properly verify whether the user has the necessary permissions to perform certain actions. As a result, unauthenticated attackers can read th...
WordPress WP Booking System Authorization Vulnerability
The WordPress Booking System 2.1.0.3 and earlier versions have a vulnerability related to authorization issues. This vulnerability stems from the exposure of sensitive information through the ‘id’ parameter. It may allow authenticated attackers with privileges at the subscriber level or higher to...
WordPress WP Booking System Authorization Vulnerability
The WordPress Booking System 2.1.0.3 and earlier versions have an authorization issue vulnerability. This vulnerability arises from plugins not properly verifying whether a user is authorized to perform a certain action. As a result, authenticated attackers with permissions for subscribers or...
WordPress Booking and Rental Manager plugin <= 2.8.0 - Other vulnerability Type vulnerability
Other vulnerability Type vulnerability discovered by Peter Tang in WordPress Plugin Booking and Rental Manager versions = 2.8.0...
WordPress Booking System SQL Injection Vulnerability
The WordPress Booking System 2.1.0.1 and earlier versions have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the parameter dataorderby and inadequate preparation of existing SQL queries. It is possible for authenticated attackers with administrator or highe...
WordPress Booking and Rental Manager has a vulnerability in input validation.
WordPress Booking and Rental Manager 2.8.0 and earlier versions have a vulnerability related to input validation errors. This vulnerability stems from improper validation of the specified number in the input, which may lead to the removal of important client functions...
WordPress Booking Package plugin <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability
Missing Authorization to Unauthenticated Sensitive Information Disclosure vulnerability discovered by afei in WordPress Plugin Booking Package versions = 1.7.29...
WordPress Booking Package plugin <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin Booking Package versions = 1.7.29...
WordPress Booking Calendar plugin <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action vulnerability
Unauthenticated Sensitive Information Exposure in 'WPBCFLEXTIMELINENAV' AJAX Action vulnerability discovered by Jonah Burgess CryptoCat in WordPress Plugin Booking Calendar versions = 11.4.3...
WordPress Booking System SQL Injection Vulnerability
The WordPress Booking System 2.1.0.1 and earlier versions have a SQL injection vulnerability. This vulnerability arises from insufficient escaping of the currentmonth parameter provided to users, as well as inadequate preparation of existing SQL queries. This leads to time-based SQL injections...
WordPress Booking Calendar plugin < 11.8 - Unauthenticated Booking Information Disclosure and Modification vulnerability
Unauthenticated Booking Information Disclosure and Modification vulnerability discovered by Olaf Schigt in WordPress Plugin Booking Calendar versions 11.8...
WordPress Booking Calendar plugin 10.15-11.8.2 - Editor+ Arbitrary Option Disclosure vulnerability
Editor+ Arbitrary Option Disclosure vulnerability discovered by vuxvinh in WordPress Plugin Booking Calendar versions 10.15-11.8.2...
CVE-2026-97248
The Booking Activities WordPress plugin in versions
CVE-2026-97248 WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
CVE-2026-97248 WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
WordPress Booking Manager plugin < 2.1.21 - Author+ SQLi vulnerability
Author+ SQLi vulnerability discovered by Mohamed Bassia in WordPress Plugin Booking Manager versions 2.1.21...
