booking vulnerabilities
CVEs whose affected-version data names the booking package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-39601Low· 3.7Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveraging Race Conditions.This issue affects Booking Calendar: from n/a through 11.8.4.
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveraging Race Conditions.This issue affects Booking Calendar: from n/a through 11.8.4.
▾ SunlitWPdevelop · bookingEPSS 0.15%via NVD
CVE-2026-74002Medium· 5.3Unauthenticated Broken Access Control in Booking Calendar <= 11.7 versions.
Unauthenticated Broken Access Control in Booking Calendar <= 11.7 versions.
▾ Sunlitwpdevelop · bookingEPSS 0.29%via NVD