CVE Intelligence

Vulnerabilidades do Eaglethemes Eagle Booking

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Eaglethemes Eagle Booking: 4 registro(s), com versões afetadas e correções.

CVE-2025-68052 Alta · 8.8 CWE-352 26/06/2026
WordPress Eagle Booking plugin <= 1.3.4.3 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Eagle Booking <= 1.3.4.3 versions.
CVE-2026-27428 Alta · 8.5 CWE-89 05/03/2026
WordPress Eagle Booking plugin <= 1.3.4.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eagle-Themes Eagle Booking eagle-booking allows SQL Injection.This issue affects Eagle Booking: from n/a through <= 1.3.4.3.
CVE-2025-68976 Média · 5.4 CWE-862 30/12/2025
WordPress Eagle Booking plugin <= 1.3.4.3 - Settings Change vulnerability
Missing Authorization vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eagle Booking: from n/a through <= 1.3.4.3.
CVE-2025-68975 Média · 4.3 CWE-639 30/12/2025
WordPress Eagle Booking plugin <= 1.3.4.3 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eagle Booking: from n/a through <= 1.3.4.3.