Skip to contentVeribo, Roland Murg Wp Booking System – Booking Calendar vulnerabilities
- murgroland wp booking system – booking calendarWP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX ActionCVE-2026-1165579.1 Critical
- murgroland wp booking system – booking calendarWP Booking System <= 2.1.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'wpbs_action=email_logs' ActionCVE-2026-1081237.5 High
- murgroland wp booking system – booking calendarWP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'user_permission' Parameter via Cross-Form Nonce ReuseCVE-2026-1093696.8 Medium
- murgroland wp booking system – booking calendarWP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wpbs_refresh_calendar_editor AJAX actionCVE-2026-1093686.5 Medium
- murgroland wp booking system – booking calendarWP Booking System <= 2.1.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' ParameterCVE-2026-1111784.9 Medium
- murgroland wp booking system – booking calendarWP Booking System <= 2.1.0.1 - Authenticated (Subscriber+) SQL Injection via 'current_month' ParameterCVE-2026-1077126.5 Medium
- murgroland wp booking system – booking calendar, wpbookingsystem wp booking system +1 moreWP Booking System – Booking Calendar <= 2.0.19.8 - Reflected Cross-Site ScriptingCVE-2024-87976.1 Medium
- veribo, roland murg wp booking system – booking calendar, wpbookingsystem wp booking system +1 moreWordPress WP Booking System Plugin <= 2.0.18 is vulnerable to Cross Site Scripting (XSS)CVE-2023-244025.9 Medium
- unknown wp booking system – booking calendar, wpbookingsystem wp booking system +1 moreWP Booking System – Booking Calendar < 2.0.15 - Authenticated Reflected Cross-Site Scripting (XSS)CVE-2021-250615.4 Medium