agentprime: murgroland-wp-booking-system-booking-calendarEvery new CVE for murgroland-wp-booking-system-booking-calendar.https://agentprime.io/CVE-2026-116557: WP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX Actionhttps://agentprime.io/advisories/CVE-2026-116557/https://agentprime.io/advisories/CVE-2026-116557/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 06:44:21 GMTCVEcriticalCVE-2026-108123: WP Booking System <= 2.1.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'wpbs_action=email_logs' Actionhttps://agentprime.io/advisories/CVE-2026-108123/https://agentprime.io/advisories/CVE-2026-108123/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 03:43:29 GMTCVECVE-2026-109369: WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'user_permission' Parameter via Cross-Form Nonce Reusehttps://agentprime.io/advisories/CVE-2026-109369/https://agentprime.io/advisories/CVE-2026-109369/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 03:43:28 GMTCVECVE-2026-109368: WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wpbs_refresh_calendar_editor AJAX actionhttps://agentprime.io/advisories/CVE-2026-109368/https://agentprime.io/advisories/CVE-2026-109368/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 03:43:27 GMTCVECVE-2026-111178: WP Booking System <= 2.1.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameterhttps://agentprime.io/advisories/CVE-2026-111178/https://agentprime.io/advisories/CVE-2026-111178/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 06:41:00 GMTCVECVE-2026-107712: WP Booking System <= 2.1.0.1 - Authenticated (Subscriber+) SQL Injection via 'current_month' Parameterhttps://agentprime.io/advisories/CVE-2026-107712/https://agentprime.io/advisories/CVE-2026-107712/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 06:40:13 GMTCVECVE-2024-8797: WP Booking System – Booking Calendar <= 2.0.19.8 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-8797/https://agentprime.io/advisories/CVE-2024-8797/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 14 Sep 2024 05:40:42 GMTCVE