WP Booking System vulnerabilities
We track 2 vulnerabilities in WP Booking System products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest WP Booking System vulnerabilities
- 7.1 High severity
WP Booking System: Improper Neutralization of Input During Web Page Generation
The WP Booking System WordPress plugin before 2.1.0.3 does not validate and escape one of its parameters before reflecting it back in an admin page, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as administrato
- 8.8 High severity
WP Booking System: Improper Neutralization of Input During Web Page Generation
The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administration screen, allowing unauthenticated attackers to perform Stored Cross-Site Script