All 7 CVE vulnerabilities found in Booking Manager, with AI-generated Chinese analysis, references, and POCs.
Vendor: Unknown
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-91025 | Booking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDOR | - | - | 2026-09-23 |
| CVE-2026-91024 | Booking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid) | - | - | 2026-09-23 |
| CVE-2026-42751 | WordPress Booking Manager plugin <= 2.1.18 - Cross Site Scripting (XSS) vulnerability CWE-79 | 6.5 | Medium | 2026-05-27 |
| CVE-2025-64275 | WordPress Booking Manager plugin <= 2.1.17 - Cross Site Scripting (XSS) vulnerability CWE-79 | 6.5 | Medium | 2025-11-13 |
| CVE-2025-10124 | Booking Manager < 2.1.15 - Contributor+ Booking Deletion | 4.3AI | Medium AI | 2025-10-10 |
| CVE-2023-50840 | WordPress Booking Manager Plugin <= 2.1.5 is vulnerable to SQL Injection CWE-89 | 8.5 | High | 2023-12-28 |
| CVE-2023-1977 | Booking Manager < 2.0.29 - Subscriber+ SSRF | 8.5 | - | 2023-08-16 |
All 7 known CVE vulnerabilities affecting Booking Manager with full Chinese analysis, references, and POCs where available.