webba-booking-lite vulnerabilities
CVEs whose affected-version data names the webba-booking-lite package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-107416High· 7.5Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6…
Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6…
▾ TwilightWebba Plugins · webba-booking-liteEPSS 0.26%via NVD
CVE-2026-97079Medium· 4.3Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.
Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.
▾ SunlitWebba Appointment Booking · webba-booking-liteEPSS 0.27%via NVD