Booking Package

Уязвимости

• CVE-2023-37389без авторизации · нужен клик≤ 1.5.98

  WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability

  Высокий 8.8

• CVE-2026-15335без авторизации≤ 1.7.20

  Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameter

  Высокий 7.5

• CVE-2026-40774без авторизации≤ 1.7.06

  WordPress Booking Package plugin <= 1.7.06 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2024-30516без авторизации≤ 1.6.27

  WordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerability

  Высокий 7.5

• CVE-2026-9851редактор+≤ 1.7.16

  Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action

  Высокий 7.2

• CVE-2024-13508без авторизации · нужен клик≤ 1.6.72

  Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameter

  Средний 6.1

• CVE-2023-39918без авторизации · нужен клик≤ 1.6.01

  WordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2021-20840без авторизации · нужен клик

  Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacke

  Средний 6.1

• CVE-2026-4911без авторизации≤ 1.7.06

  Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter

  Средний 5.3