Advisories · Technology

iGMS Direct Booking.

Every CVE that names iGMS Direct Booking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-88825 CVE record

CVSS 8.8 High

iGMS Direct Booking < 2.0 - Unauthenticated Stored XSS via Widget Settings
- iGMS Direct Booking
- Cross-site scripting (XSS)
Not analysed yet 18 Sept 2026
CVE-2026-39652 CVE record

CVSS 5.3 Medium

WordPress iGMS Direct Booking plugin <= 1.3 - Broken Access Control vulnerability
- iGMS Direct Booking
- Broken access control
Not analysed yet 8 Apr 2026