TI-2025-41661 CVE-2025-68052 · GHSA-mfrc-v4qq-frq6
WordPress Eagle Booking plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 39
Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions.
Eagle-Themes
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Eagle-Themes records in CISA KEVNo Eagle-Themes vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-21841 CVE-2026-27428 · GHSA-hppx-4jmh-q6gf
WordPress Eagle Booking plugin <= 1.3.4.3 - SQL Injection vulnerability
Priority LOW 37
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eagle-Themes Eagle Booking eagle-booking allows SQL Injection.This issue affects Eagle Booking: from n/a through <= 1.…
TI-2026-01300 CVE-2026-1614 · GHSA-f8m8-w7hg-xv97
Cross-site scripting in Eagle-Themes Rise Blocks – A Complete Gutenberg Page Builder
Priority LOW 28
The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘logoTag’ Site Identity block attribute in all versions up to, and including, 3.7 due to insuf…
TI-2025-42432 CVE-2025-68976 · GHSA-3f3m-mgfh-hc2q
WordPress Eagle Booking plugin <= 1.3.4.3 - Settings Change vulnerability
Priority LOW 24
Missing Authorization vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eagle Booking: from n/a through <= 1.3.4.3.
TI-2025-42431 CVE-2025-68975 · GHSA-ffhx-92gc-w57q
WordPress Eagle Booking plugin <= 1.3.4.3 - Insecure Direct Object References (IDOR) vulnerability
Priority LOW 20
Authorization Bypass Through User-Controlled Key vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eagle Booking: from n/…