Skip to content
Noroxi

WP Booking System

wp-booking-system · plugin

Known security vulnerabilities for WP Booking System. Find out in seconds which version runs on your site with WP Lens.

8 known vulnerabilities

latest Mar 5, 2026

Vulnerabilities

  • CVE-2019-12239

    The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that r

    High 7.2

  • CVE-2024-50425

    WordPress WP Booking System – Booking Calendar plugin <= 2.0.19.10 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2024-8797

    WP Booking System – Booking Calendar <= 2.0.19.8 - Reflected Cross-Site Scripting

    Medium 6.1

  • CVE-2017-2168

    Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to ver

    Medium 6.1

  • CVE-2025-68515

    WordPress WP Booking System plugin <= 2.0.19.12 - Sensitive Data Exposure vulnerability

    Medium 5.8

  • CVE-2021-25061→ 2.0.15

    WP Booking System – Booking Calendar < 2.0.15 - Authenticated Reflected Cross-Site Scripting (XSS)

    Medium 5.4

  • CVE-2023-24402

    WordPress WP Booking System Plugin <= 2.0.18 is vulnerable to Cross Site Scripting (XSS)

    Medium 4.8

  • CVE-2023-49758

    WordPress WP Booking System plugin <= 2.0.19.2 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory