Advisories · Technology

Webba Appointment Booking Webba Booking.

Every CVE that names Webba Appointment Booking Webba Booking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97079 CVE record

CVSS 4.3 Medium

WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability
- Webba Appointment Booking Webba Booking
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2025-66530 CVE record

CVSS 4.3 Medium

WordPress Webba Booking plugin <= 6.2.1 - Broken Access Control vulnerability
- Webba Appointment Booking Webba Booking
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-54040 CVE record

CVSS 6.5 Medium

WordPress Webba Booking <= 5.1.20 - Broken Access Control Vulnerability
- Webba Appointment Booking Webba Booking
- Broken access control
Not analysed yet 20 Aug 2025
CVE-2025-54729 CVE record

CVSS 5.9 Medium

WordPress Webba Booking Plugin <= 6.0.5 - Cross Site Scripting (XSS) Vulnerability
- Webba Appointment Booking Webba Booking
- Cross-site scripting (XSS)
Not analysed yet 14 Aug 2025
CVE-2025-54036 CVE record

CVSS 4.3 Medium

WordPress Webba Booking plugin <= 5.1.20 - Cross Site Request Forgery (CSRF) Vulnerability
- Webba Appointment Booking Webba Booking
- Cross-site request forgery (CSRF)
Not analysed yet 16 Jul 2025