Known vulnerabilities in Unknown WooCommerce Bookings
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-14854 | The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate… | 7.5 High | Oct 11, 2026 |
| CVE-2026-14853 | The WooCommerce Bookings WordPress plugin before 3.9.0 does not perform a capability check on one of its AJAX actions,… | 4.3 Medium | Aug 23, 2026 |