Booking Manager (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-23. Vendor: Unknown.

CVEs of Booking Manager

• CVE-2026-91025 - CVSS 4.3 (medium), 2026-09-23: The Booking Manager WordPress plugin before 2.1.21 does not verify that a request to modify a user's Booking Manager WordPress plugin before 2.1.21-specific…
• CVE-2026-91024 - CVSS 6.8 (medium), 2026-09-23: The Booking Manager WordPress plugin before 2.1.21 does not sanitize and escape values taken from a fetched external iCalendar feed before using them in a SQL…
• CVE-2025-10124 - CVSS 4.5 (medium), 2025-10-10: The Booking Manager WordPress plugin before 2.1.15 registers a shortcode that deletes bookings and makes that shortcode available to anyone with contributor…
• CVE-2023-1977 - CVSS 8.8 (high), 2023-08-16: The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics…