What’s Vulnerable › Products

Booking Manager vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Booking Manager version is affected

Latest Booking Manager vulnerabilities

• CVE-2026-91025 — Booking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDOR (CVSS 4.3)
• CVE-2026-91024 — Booking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid) (CVSS 6.8)
• CVE-2025-10124 — Booking Manager < 2.1.15 - Contributor+ Booking Deletion (CVSS 4.5)
• CVE-2023-50840 — WordPress Booking Manager Plugin <= 2.1.5 is vulnerable to SQL Injection (CVSS 8.8)
• CVE-2023-1977 — Booking Manager < 2.0.29 - Subscriber+ SSRF (CVSS 8.8)