Webba Plugins vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Webba Plugins products: 2 record(s), with severity, exploitation and fixes.

Webba Booking 2

Exploited only (KEV) →

CVE-2026-107416 High · 7.5 CWE-639 Oct 15, 2026

WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.2.

CVE-2026-27409 Medium · 5.3 CWE-862 Jul 1, 2026

WordPress Webba Booking plugin <= 6.4.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from n/a through 6.4.13.