MU
Vendor
murgroland
7
CVEs
0
On KEV
5
New 30D
Products
WB7.5
WP Booking System – Booking Calendar
murgroland
6 CVEs0 on KEV5 new
WS6.1
WP Simple Booking Calendar
murgroland
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108123 | WB WP Booking System – Booking Calendar murgroland | 7.5 | Oct 17 | WP Booking System <= 2.1.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'wpbs_action=email_logs' Action |
| CVE-2026-109369 | WB WP Booking System – Booking Calendar murgroland | 6.8 | Oct 17 | WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'user_permission' Parameter via Cross-Form Nonce Reuse |
| CVE-2026-109368 | WB WP Booking System – Booking Calendar murgroland | 6.5 | Oct 17 | WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wpbs_refresh_calendar_editor AJAX action |
| CVE-2026-111178 | WB WP Booking System – Booking Calendar murgroland | 4.9 | Oct 16 | WP Booking System <= 2.1.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter |
| CVE-2026-107712 | WB WP Booking System – Booking Calendar murgroland | 6.5 | Oct 10 | WP Booking System <= 2.1.0.1 - Authenticated (Subscriber+) SQL Injection via 'current_month' Parameter |
| CVE-2024-8797 | WB WP Booking System – Booking Calendar murgroland | 6.1 | Sep 14 | WP Booking System – Booking Calendar <= 2.0.19.8 - Reflected Cross-Site Scripting |
| CVE-2024-8663 | WS WP Simple Booking Calendar murgroland | 6.1 | Sep 13 | WP Simple Booking Calendar <= 2.0.10 - Reflected Cross-Site Scripting |