Security
فارسی
All products

booking-manager

WordPress · Plugin
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Booking Manager <= 2.1.20 - Authenticated (Subscriber+) Insecure Direct Object ReferenceCVE-2026-91025 booking-manager WordPress Medium Fix reported
Booking Manager <= 2.1.20 - Authenticated (Author+) SQL InjectionCVE-2026-91024 booking-manager WordPress Medium Fix reported
Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar <= 2.1.18 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-42751 booking-manager WordPress Medium Fix reported
Booking Manager <= 2.1.17 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-64275 booking-manager WordPress Medium Fix reported
Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar <= 2.1.14 - Authenticated (Contributor+) Booking DeletionCVE-2025-10124 booking-manager WordPress Medium Fix reported
Booking Manager <= 2.0.28 - Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2023-1977 booking-manager WordPress Medium Fix reported
Booking Manager <= 2.1.5 - Authenticated(Contributor+) SQL Injection via ShortcodeCVE-2023-50840 booking-manager WordPress High Fix reported