wp-booking-system vulnerabilities

CVEs whose affected-version data names the wp-booking-system package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-57639High· 7.1

4d ago

WordPress WP Booking System plugin <= 2.1.0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Roland Murg WP Booking System wp-booking-system allows Reflected XSS.This issue affects WP Booking System: from n/a through 2.1.0.6.

▾ TwilightRoland Murg · wp-booking-systemEPSS 0.15%via CVEORG