| CVE-2026-106000 |
Booking Package < 1.7.34 - Unauthenticated Payment Bypass
|
5.3
Medium
|
Nov 4, 2026 |
| CVE-2026-105997 |
The Booking Package WordPress plugin before 1.7.33 does not restrict who can trigger its booking verification-code…
|
5.3
Medium
|
Oct 28, 2026 |
| CVE-2026-105999 |
The Booking Package WordPress plugin before 1.7.31 does not perform authorization checks before returning…
|
5.3
Medium
|
Oct 21, 2026 |
| CVE-2026-105998 |
The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting…
|
5.3
Medium
|
Oct 21, 2026 |
| CVE-2026-105996 |
The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation tokens using a secure source…
|
4.8
Medium
|
Oct 21, 2026 |
| CVE-2026-105995 |
The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored…
|
5.3
Medium
|
Oct 10, 2026 |
| CVE-2026-16986 |
The Booking Package WordPress plugin before 1.7.25 does not validate the payment amount server-side against the stored…
|
5.3
Medium
|
Aug 26, 2026 |