What’s Vulnerable › Products

webba-agency Easy Appointment Booking & Scheduling System – Webba Booking Calendar vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your webba-agency Easy Appointment Booking & Scheduling System – Webba Booking Calendar version is affected

Latest webba-agency Easy Appointment Booking & Scheduling System – Webba Booking Calendar vulnerabilities

• CVE-2024-13362 — Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter (CVSS 6.1)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-8432 — Appointment & Event Booking Calendar Plugin – Webba Booking <= 5.0.48 - Missing Authorization to Authenticated (Subscriber+) CSS Settings Update (CVSS 4.3)
• CVE-2023-51354 — WordPress Webba Booking Plugin <= 4.5.33 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2021-36847 — WordPress Webba Booking plugin <= 4.2.21 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8)