Vendors / Webba-booking Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Webba-booking records in CISA KEV No Webba-booking vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in WebbaPlugins Appointment & Event Booking Calendar Plugin – Webba Booking.This issue affects Appointment & Event Booking Calendar Plugin – Webba Booking: from n/a through…
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00222 · Published 2023-12-29 · No fix listed CWE-352
Priority LOW 23
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebbaPlugins Webba Booking plugin <= 4.2.21 at WordPress.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0061 · Published 2022-08-22 · No fix listed CWE-79
Priority LOW 20
The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_appearance() function in all versions…
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00395 · Published 2024-09-24 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical0 High1 Medium2 Low0 No CVSS0