Masaakitanaka Booking Package
4 CVEs affecting Masaakitanaka Booking Package. Latest disclosed: 2026-07-11. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-15335 | High | 7.5 | 2026-07-11 | The Booking Package plugin for WordPress is vulnerable to generic SQL Injection via 'email' Form Parameter (form<N>) in all versions up to, and including, 1.7… |
CVE-2026-9851 | High | 7.2 | 2026-06-06 | The Booking Package plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in versions up to, and including, 1.7.16. This is due to a… |
CVE-2024-13508 | Medium | 6.1 | 2025-02-19 | The Booking Package plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the locale parameter in all versions up to, and including, 1.6.72… |
CVE-2026-4911 | Medium | 5.3 | 2026-04-28 | The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to, and including, 1.7.06 This is due to the intentForStripe() func… |