CyberSecBulletin

WooCommerce Bookings vulnerabilities

We track 1 vulnerability in WooCommerce Bookings products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest WooCommerce Bookings vulnerabilities

  • 7.5 High severity

    WooCommerce Bookings: Uncontrolled Resource Consumption

    CVE-2026-14854WooCommerce Bookings

    The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Servic