Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Webba-booking Clear all filters
TI-2024-07817 CVE-2024-8432 · GHSA-2crp-c7w4-2c48

Missing authorization in webba-agency Easy Appointment Booking & Scheduling System…

Priority LOW 20

The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_appearance() function in all versions…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00395 Published 2024-09-24 No fix listed CWE-862
TI-2023-28012 CVE-2023-51354 · GHSA-gjh4-p42j-ccc9

WordPress Webba Booking Plugin <= 4.5.33 is vulnerable to Cross Site Request Forgery (CSRF)

Priority LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in WebbaPlugins Appointment & Event Booking Calendar Plugin – Webba Booking.This issue affects Appointment & Event Booking Calendar Plugin – Webba Booking: from n/a through…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00222 Published 2023-12-29 No fix listed CWE-352