Webba-booking Webba Booking — known CVE vulnerabilities

Every CVE whose affected-product data names Webba-booking Webba Booking, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-36847 — CVSS 4.8 (medium): Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WebbaPlugins Webba Booking plugin <= 4.2.21 at WordPress.
• CVE-2023-51354 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in WebbaPlugins Appointment & Event Booking Calendar Plugin – Webba Booking.This issue…
• CVE-2024-8432 — CVSS 4.3 (medium): The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress is vulnerable to unauthorized modification of data…