Skip to contentMasaakitanaka Booking Package vulnerabilities
- masaakitanaka booking packageBooking Package < 1.7.34 - Unauthenticated Payment BypassCVE-2026-1060005.3 Medium
- masaakitanaka booking packageBooking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary RecipientCVE-2026-1059975.3 Medium
- masaakitanaka booking packageBooking Package < 1.7.31 - Unauthenticated Calendar Account Information DisclosureCVE-2026-1059995.3 Medium
- masaakitanaka booking packageBooking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing AuthorizationCVE-2026-1059985.3 Medium
- masaakitanaka booking packageBooking Package < 1.7.31 - Unauthenticated Booking PII Disclosure and Cancellation via Predictable TokenCVE-2026-1059964.8 Medium
- masaakitanaka booking packageBooking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode AttributeCVE-2026-1034256.4 Medium
- masaakitanaka booking packageBooking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'CVE-2026-1034237.5 High
- masaakitanaka booking packageBooking Package < 1.7.30 - Unauthenticated Booking Customer PII DisclosureCVE-2026-1059955.3 Medium
- masaakitanaka booking packageBooking Package < 1.7.25 - Unauthenticated Price Manipulation via Service and Option Cost ParametersCVE-2026-169865.3 Medium
- masaakitanaka booking packageBooking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form ParameterCVE-2026-153357.5 High
- masaakitanaka booking packageWordPress Booking Package plugin <= 1.7.06 - Broken Access Control vulnerabilityCVE-2026-407747.5 High
- masaakitanaka booking packageBooking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX ActionCVE-2026-98517.2 High
- masaakitanaka booking packageBooking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' ParameterCVE-2026-49115.3 Medium
- masaakitanaka booking packageWordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerabilityCVE-2024-305167.5 High
- masaakitanaka booking packageBooking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale ParameterCVE-2024-135086.1 Medium
- masaakitanaka booking packageWordPress Booking Package SAASPROJECT plugin <= 1.5.98 - Unauthenticated Privilege Escalation vulnerabilityCVE-2023-373898.8 High
- masaakitanaka booking packageWordPress Booking Package Plugin <= 1.6.01 is vulnerable to Cross Site Scripting (XSS)CVE-2023-399187.1 High