Security
فارسی
All products

booking-package

WordPress · Plugin
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Booking Package < 1.7.34 - Unauthenticated Free Confirmed Booking CreationCVE-2026-106000 booking-package WordPress Medium Fix reported
Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'CVE-2026-103423 booking-package WordPress High Fix reported
Booking Package < 1.7.33 - Missing AuthorizationCVE-2026-105997 booking-package WordPress Medium Fix reported
Booking Package < 1.7.31 - Unauthenticated Information ExposureCVE-2026-105996 booking-package WordPress Medium Fix reported
Booking Package <= 1.7.30 - Unauthenticated Information ExposureCVE-2026-105999 booking-package WordPress Medium Fix reported
Booking Package <= 1.7.30 - Missing AuthorizationCVE-2026-105998 booking-package WordPress Medium Fix reported
Booking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode AttributeCVE-2026-103425 booking-package WordPress Medium Fix reported
Booking Package <= 1.7.29 - Unauthenticated Information ExposureCVE-2026-105995 booking-package WordPress Medium Fix reported
Booking Package < 1.7.25 - Unauthenticated Price ManipulationCVE-2026-16986 booking-package WordPress Medium Fix reported
Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form ParameterCVE-2026-15335 booking-package WordPress High Fix reported
Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX ActionCVE-2026-9851 booking-package WordPress High Fix reported
Booking Package <= 1.7.06 - Missing AuthorizationCVE-2026-40774 booking-package WordPress Medium Fix reported
Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' ParameterCVE-2026-4911 booking-package WordPress Medium Fix reported
Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale ParameterCVE-2024-13508 booking-package WordPress Medium Fix reported
Booking Package <= 1.6.27 - Unauthenticated Price ManipulationCVE-2024-30516 booking-package WordPress Medium Fix reported
Booking Package <= 1.6.01 - Reflected Cross-Site Scripting via 'mode'CVE-2023-39918 booking-package WordPress Medium Fix reported
Booking Package <= 1.5.28 - Unauthenticated Sensitive Data DisclosureCVE-2022-0709 booking-package WordPress High Fix reported
Booking Package <= 1.5.98 - Authorization Bypass to Arbitrary Password ResetCVE-2023-37389 booking-package WordPress Critical Fix reported
Booking Package <= 1.5.10 - Reflected Cross-Site ScriptingCVE-2021-20840 booking-package WordPress Medium Fix reported