Masaakitanaka vulnerabilities

Products

• Booking Package 17

Newest

• masaakitanaka booking package Booking Package < 1.7.34 - Unauthenticated Payment Bypass CVE-2026-106000 5.3 MediumNovember 4, 2026
• masaakitanaka booking package Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient CVE-2026-105997 5.3 MediumOctober 28, 2026
• masaakitanaka booking package Booking Package < 1.7.31 - Unauthenticated Calendar Account Information Disclosure CVE-2026-105999 5.3 MediumOctober 21, 2026
• masaakitanaka booking package Booking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing Authorization CVE-2026-105998 5.3 MediumOctober 21, 2026
• masaakitanaka booking package Booking Package < 1.7.31 - Unauthenticated Booking PII Disclosure and Cancellation via Predictable Token CVE-2026-105996 4.8 MediumOctober 21, 2026
• masaakitanaka booking package Booking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute CVE-2026-103425 6.4 MediumOctober 14, 2026
• masaakitanaka booking package Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0' CVE-2026-103423 7.5 HighOctober 14, 2026
• masaakitanaka booking package Booking Package < 1.7.30 - Unauthenticated Booking Customer PII Disclosure CVE-2026-105995 5.3 MediumOctober 10, 2026
• masaakitanaka booking package Booking Package < 1.7.25 - Unauthenticated Price Manipulation via Service and Option Cost Parameters CVE-2026-16986 5.3 MediumAugust 26, 2026
• masaakitanaka booking package Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameter CVE-2026-15335 7.5 HighJuly 11, 2026
• masaakitanaka booking package WordPress Booking Package plugin <= 1.7.06 - Broken Access Control vulnerability CVE-2026-40774 7.5 HighJune 15, 2026
• masaakitanaka booking package Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action CVE-2026-9851 7.2 HighJune 6, 2026
• masaakitanaka booking package Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter CVE-2026-4911 5.3 MediumApril 28, 2026
• masaakitanaka booking package WordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerability CVE-2024-30516 7.5 HighJanuary 5, 2026
• masaakitanaka booking package Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameter CVE-2024-13508 6.1 MediumFebruary 18, 2025
• masaakitanaka booking package WordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerability CVE-2023-37389 8.8 HighMay 17, 2024
• masaakitanaka booking package WordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS) CVE-2023-39918 7.1 HighSeptember 4, 2023