Masaakitanaka vulnerabilities
We track 3 vulnerabilities in Masaakitanaka products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
Latest Masaakitanaka vulnerabilities
- 7.5 High severity
Booking Package: Missing Authorization
The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthentica
- 7.5 High severity
Booking Package: Improper Neutralization of Special Elements used in an SQL Command
The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter (form<N>) in all versions up to, and including, 1.7.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on
- 7.2 High severity
Booking Package: Authorization Bypass Through User-Controlled Key
The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in versions up to, and including, 1.7.16. This is due to a missing capability check on the 'updateUser' branch of the package_app_action AJAX endpoint, where th