Webba Appointment Booking vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Webba Appointment Booking products: 2 record(s), with severity, exploitation and fixes.

Webba Booking 2

Exploited only (KEV) →

CVE-2026-97079 Medium · 4.3 CWE-639 Sep 30, 2026

WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.

CVE-2025-66530 Medium · 4.3 CWE-862 Dec 9, 2025

WordPress Webba Booking plugin <= 6.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through <= 6.2.1.