CVE-2022-0709

The vulnerability CVE-2022-0709 affects the WordPress Booking Package plugin (before 1.5.29). A token used for exporting the iCal booking calendar is returned in unauthenticated booking responses, enabling unauthenticated users to trigger a sensitive data disclosure that may leak booking details ...

CVE-2021-20840

The CVE-2021-20840 entry concerns the Booking Package - Appointment Booking Calendar System WordPress plugin. Affected versions are prior to 1.5.11, with the root cause described as insufficient input validation in certain URL query parameters, leading to Cross-Site Scripting (XSS). The practical...

CVE-2023-39918

CVE-2023-39918 affects the SAASPROJECT Booking Package WordPress plugin (versions