Vulnerabilities > Webba Booking

DATE CVE VULNERABILITY TITLE RISK
2024-09-24 CVE-2024-8432 Missing Authorization vulnerability in Webba-Booking Webba Booking
The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_appearance() function in all versions up to, and including, 5.0.48.
network
low complexity
webba-booking CWE-862
4.3
2023-12-29 CVE-2023-51354 Unspecified vulnerability in Webba-Booking Webba Booking
Cross-Site Request Forgery (CSRF) vulnerability in WebbaPlugins Appointment & Event Booking Calendar Plugin – Webba Booking.This issue affects Appointment & Event Booking Calendar Plugin – Webba Booking: from n/a through 4.5.33.
network
low complexity
webba-booking
8.8
2022-08-22 CVE-2021-36847 Unspecified vulnerability in Webba-Booking Webba Booking
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebbaPlugins Webba Booking plugin <= 4.2.21 at WordPress.
network
low complexity
webba-booking
4.8