Advisories · Technology

Booking Manager.

Every CVE that names Booking Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-91025 CVE record

CVSS 4.3 Medium

Booking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDOR
- Booking Manager
- Broken access control
Not analysed yet 23 Sept 2026
CVE-2026-91024 CVE record

CVSS 6.8 Medium

Booking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid)
- Booking Manager
- SQL injection
Not analysed yet 23 Sept 2026
CVE-2025-10124 CVE record

CVSS 4.5 Medium

Booking Manager < 2.1.15 - Contributor+ Booking Deletion
- Booking Manager
Not analysed yet 10 Oct 2025
CVE-2023-1977 CVE record

Booking Manager < 2.0.29 - Subscriber+ SSRF
- Booking Manager
Not analysed yet 16 Aug 2023