Webba Appointment Booking vulnerabilities

5 vulnerabilities

Known vulnerabilities in Webba Appointment Booking products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
4.3MediumCVE-2025-54036webba appointment booking · webba booking +1 moreWordPress Webba Booking plugin <= 5.1.20 - Cross Site Request Forgery (CSRF) VulnerabilityCross-Site Request Forgery (CSRF) vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Cross Site Request Forgery.This issue affects Webba Booking: from n/a through <= 5.1.20.EPSS0.14%5.9MediumCVE-2025-54729webba appointment booking · webba booking +1 moreWordPress Webba Booking Plugin <= 6.0.5 - Cross Site Scripting (XSS) VulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Stored XSS.This issue affects Webba Booking: from n/a through <= 6.0.5.EPSS0.18%6.5MediumCVE-2025-54040webba appointment booking · webba booking +1 moreWordPress Webba Booking <= 5.1.20 - Broken Access Control VulnerabilityMissing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through <= 5.1.20.EPSS0.36%4.3MediumCVE-2025-66530webba appointment booking · webba booking +1 moreWordPress Webba Booking plugin <= 6.2.1 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through <= 6.2.1.EPSS0.31%4.3MediumCVE-2026-97079webba appointment booking · webba booking +1 moreWordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerabilitySubscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.EPSS0.28%