Advisories · Technology

Roland Murg WP Booking System.

Every CVE that names Roland Murg WP Booking System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-57639 CVE record

CVSS 7.1 High

WordPress WP Booking System plugin <= 2.1.0.6 - Cross Site Scripting (XSS) vulnerability
- Roland Murg WP Booking System
- Cross-site scripting (XSS)
Not analysed yet 4 Nov 2026
CVE-2025-68515 CVE record

CVSS 5.8 Medium

WordPress WP Booking System plugin <= 2.0.19.12 - Sensitive Data Exposure vulnerability
- Roland Murg WP Booking System
- Information disclosure
Not analysed yet 5 Mar 2026
CVE-2023-49758 CVE record

CVSS 4.3 Medium

WordPress WP Booking System plugin <= 2.0.19.2 - Broken Access Control vulnerability
- Roland Murg WP Booking System
- Broken access control
Not analysed yet 9 Dec 2024
CVE-2024-50425 CVE record

CVSS 6.5 Medium

WordPress WP Booking System – Booking Calendar plugin <= 2.0.19.10 - Broken Access Control vulnerability
- Roland Murg WP Booking System
- Information disclosure
Not analysed yet 29 Oct 2024