TI-2026-29443 CVE-2026-40774 · GHSA-8367-f83r-jqj5
WordPress Booking Package plugin <= 1.7.06 - Broken Access Control vulnerability
Priority LOW 38
Unauthenticated Broken Access Control in Booking Package <= 1.7.06 versions.
Vulnerabilities
5 records
TI-2024-20240 CVE-2024-30516 · GHSA-676x-w6cw-fj64
WordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerability
Priority LOW 38
Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking Package: from n/a through 1.6.27.
TI-2023-20817 CVE-2023-39918 · GHSA-8hgm-54v7-vqj3
WordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SAASPROJECT Booking Package Booking Package plugin <= 1.6.01 versions.
TI-2022-00623 CVE-2022-0709 · GHSA-24jf-3vhr-fw23
Booking Package < 1.5.29 - Unauthenticated Sensitive Data Disclosure
Priority LOW 36
The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's booking calendar, but this token is returned in the json response to unauthenticated users performing a bo…
TI-2021-04055 CVE-2021-20840 · GHSA-6wcx-352r-rcj5
Cross-site scripting in SaasProject Booking Package - Appointment Booking Calendar System
Priority LOW 30
Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbitrary script via unspecified vectors.