Skip to content
Noroxi

Booking Package

booking-package · plugin

Known security vulnerabilities for Booking Package. Find out in seconds which version runs on your site with WP Lens.

9 known vulnerabilities

latest Jul 11, 2026

Vulnerabilities

  • CVE-2023-37389

    WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability

    High 8.8

  • CVE-2026-15335

    Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameter

    High 7.5

  • CVE-2026-40774

    WordPress Booking Package plugin <= 1.7.06 - Broken Access Control vulnerability

    High 7.5

  • CVE-2024-30516

    WordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerability

    High 7.5

  • CVE-2026-9851

    Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action

    High 7.2

  • CVE-2024-13508

    Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameter

    Medium 6.1

  • CVE-2023-39918

    WordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS)

    Medium 6.1

  • CVE-2021-20840

    Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacke

    Medium 6.1

  • CVE-2026-4911

    Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter

    Medium 5.3

← Back to directory