Advisories · Technology

Webba Plugins Webba Booking.

Every CVE that names Webba Plugins Webba Booking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116407 CVE record

CVSS 5.4 Medium

WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability
- Webba Plugins Webba Booking
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-116406 CVE record

CVSS 4.3 Medium

WordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability
- Webba Plugins Webba Booking
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-107416 CVE record

CVSS 7.5 High

WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (IDOR) vulnerability
- Webba Plugins Webba Booking
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-27409 CVE record

CVSS 5.3 Medium

WordPress Webba Booking plugin <= 6.4.13 - Broken Access Control vulnerability
- Webba Plugins Webba Booking
- Broken access control
Not analysed yet 1 Jul 2026