All 6 CVE vulnerabilities found in Webba Booking, with AI-generated Chinese analysis, references, and POCs.
Vendor: Webba Appointment Booking
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-97079 | WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability CWE-639 | 4.3 | Medium | 2026-09-30 |
| CVE-2026-27409 | WordPress Webba Booking plugin <= 6.4.13 - Broken Access Control vulnerability CWE-862 | 5.3 | Medium | 2026-07-01 |
| CVE-2025-66530 | WordPress Webba Booking plugin <= 6.2.1 - Broken Access Control vulnerability CWE-862 | 4.3 | Medium | 2025-12-09 |
| CVE-2025-54040 | WordPress Webba Booking <= 5.1.20 - Broken Access Control Vulnerability CWE-862 | 6.5 | Medium | 2025-08-20 |
| CVE-2025-54729 | WordPress Webba Booking Plugin <= 6.0.5 - Cross Site Scripting (XSS) Vulnerability CWE-79 | 5.9 | Medium | 2025-08-14 |
| CVE-2025-54036 | WordPress Webba Booking plugin <= 5.1.20 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 | 4.3 | Medium | 2025-07-16 |
All 6 known CVE vulnerabilities affecting Webba Booking with full Chinese analysis, references, and POCs where available.