Booking Package

Güvenlik açıkları

• CVE-2023-37389kimlik doğrulamasız · tıklama gerekir≤ 1.5.98

  WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability

  Yüksek 8.8

• CVE-2026-15335kimlik doğrulamasız≤ 1.7.20

  Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameter

  Yüksek 7.5

• CVE-2026-40774kimlik doğrulamasız≤ 1.7.06

  WordPress Booking Package plugin <= 1.7.06 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2024-30516kimlik doğrulamasız≤ 1.6.27

  WordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerability

  Yüksek 7.5

• CVE-2026-9851editör+≤ 1.7.16

  Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action

  Yüksek 7.2

• CVE-2024-13508kimlik doğrulamasız · tıklama gerekir≤ 1.6.72

  Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameter

  Orta 6.1

• CVE-2023-39918kimlik doğrulamasız · tıklama gerekir≤ 1.6.01

  WordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2021-20840kimlik doğrulamasız · tıklama gerekir

  Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacke

  Orta 6.1

• CVE-2026-4911kimlik doğrulamasız≤ 1.7.06

  Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter

  Orta 5.3