SaasProject vulnerabilities
We track 3 vulnerabilities in SaasProject products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 5, 2026.
Latest SaasProject vulnerabilities
- 7.5 High severity
Booking Package: Improper Validation of Specified Quantity in Input
Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking Package: from n/a through 1.6.27.
- 8.8 High severity
Booking Package: Improper Privilege Management
Improper Privilege Management vulnerability in SAASPROJECT Booking Package Booking Package allows Privilege Escalation.This issue affects Booking Package: from n/a through 1.5.98.
- 7.5 High severity
Booking Package – Appointment Booking Calendar…: Exposure of Sensitive Information to an Unauthorized Actor
The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's booking calendar, but this token is returned in the json response to unauthenticated users performing a booking, leading to a sensitive data discl