Murgroland vulnerabilities
We track 2 vulnerabilities in Murgroland products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2026.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest Murgroland vulnerabilities
- 9.1 Critical severity
WP Booking System – Booking Calendar: Missing Authorization
The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpbs_action_ajax_calendar_remove_note() function in versions up to, and including, 2.1.0.5 This makes it p
- 7.5 High severity
WP Booking System – Booking Calendar: Missing Authorization
The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it pos