Threat Database

Threat Entry Updated 2026-10-30

Webba Booking Lite - Security Vulnerability (CVE-2026-116407)

Missing Authorization vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.4.

PLUGIN Webba Booking Lite

CVE-2026-116407

MEDIUM CVSS 5.4 2026-10-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-09-30

Webba Booking Lite - Security Vulnerability (CVE-2026-97079)

Subscriber Insecure Direct Object References (IDOR) in Webba Booking

PLUGIN Webba Booking Lite

CVE-2026-97079

MEDIUM CVSS 4.3 2026-09-30

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-07-01

Webba Booking Lite - Broken Access Control (CVE-2026-27409)

Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from n/a through 6.4.13.

PLUGIN Webba Booking Lite

CVE-2026-27409

MEDIUM CVSS 5.3 2026-07-01

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Webba Booking Lite - Broken Access Control (CVE-2025-66530)

Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through

PLUGIN Webba Booking Lite

CVE-2025-66530

MEDIUM CVSS 4.3 2025-12-09

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Webba Booking Lite - Broken Access Control (CVE-2025-54040)

Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through

PLUGIN Webba Booking Lite

CVE-2025-54040

MEDIUM CVSS 6.5 2025-08-20

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Webba Booking Lite - Cross-Site Scripting (XSS) (CVE-2025-54729)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Stored XSS.This issue affects Webba Booking: from n/a through

PLUGIN Webba Booking Lite

CVE-2025-54729

MEDIUM CVSS 5.9 2025-08-14

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Webba Booking Lite - Cross-Site Request Forgery (CSRF) (CVE-2025-54036)

Cross-Site Request Forgery (CSRF) vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Cross Site Request Forgery.This issue affects Webba Booking: from n/a through

PLUGIN Webba Booking Lite

CVE-2025-54036

MEDIUM CVSS 4.3 2025-07-16

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Webba Booking Lite - Broken Access Control (CVE-2024-8432)

The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_appearance() function in all versions up to, and including, 5.0.48. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the booking form's CSS.

PLUGIN Webba Booking Lite

CVE-2024-8432

MEDIUM CVSS 4.3 2024-09-24

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Webba Booking Lite - Cross-Site Scripting (XSS) (CVE-2021-36847)

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebbaPlugins Webba Booking plugin

PLUGIN Webba Booking Lite

CVE-2021-36847

MEDIUM CVSS 4.8 2022-08-22

Risk Score

Open Full Technical Breakdown