Booking Package vulnerabilities

3 known vulnerabilities in Booking Package from SaasProject. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Booking Package: Improper Validation of Specified Quantity in Input

  CVE-2024-30516Jan 5, 2026SaasProject

  Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking Package: from n/a through 1.6.27.

• 8.8 High severity

  Booking Package: Improper Privilege Management

  CVE-2023-37389May 17, 2024SAASPROJECT Booking Package

  Improper Privilege Management vulnerability in SAASPROJECT Booking Package Booking Package allows Privilege Escalation.This issue affects Booking Package: from n/a through 1.5.98.

• 7.5 High severity

  Booking Package – Appointment Booking Calendar…: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2022-0709Apr 4, 2022Booking Package – Appointment Booking Calendar SystemEPSS 1.62%

  The Booking Package WordPress plugin before 1.5.29 requires a token for exporting the ical representation of it's booking calendar, but this token is returned in the json response to unauthenticated users performing a booking, leading to a sensitive data discl