CVE Intelligence

Eaglethemes Eagle Booking vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Eaglethemes Eagle Booking: 4 record(s), with affected versions and fixes.

CVE-2025-68052 High · 8.8 CWE-352 Jun 26, 2026
WordPress Eagle Booking plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions.
CVE-2026-27428 High · 8.5 CWE-89 Mar 5, 2026
WordPress Eagle Booking plugin <= 1.3.4.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eagle-Themes Eagle Booking eagle-booking allows SQL Injection.This issue affects Eagle Booking: from n/a through <= 1.3.4.3.
CVE-2025-68976 Medium · 5.4 CWE-862 Dec 30, 2025
WordPress Eagle Booking plugin <= 1.3.4.3 - Settings Change vulnerability
Missing Authorization vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eagle Booking: from n/a through <= 1.3.4.3.
CVE-2025-68975 Medium · 4.3 CWE-639 Dec 30, 2025
WordPress Eagle Booking plugin <= 1.3.4.3 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eagle Booking: from n/a through <= 1.3.4.3.