Advisories · Technology

WooCommerce Bookings.

Every CVE that names WooCommerce Bookings among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-14854 CVE record

CVSS 7.5 High

WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service
- WooCommerce Bookings
- Denial of service
Not analysed yet 11 Oct 2026
CVE-2026-14853 CVE record

CVSS 4.3 Medium

WooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization
- WooCommerce Bookings
- Broken access control
Not analysed yet 23 Aug 2026
CVE-2023-32747 CVE record

CVSS 5.4 Medium

WordPress WooCommerce Bookings Plugin <= 1.15.78 is vulnerable to Insecure Direct Object References (IDOR)
- WooCommerce Bookings
- Broken access control
Not analysed yet 21 Dec 2023
CVE-2023-47787 CVE record

CVSS 4.3 Medium

WordPress WooCommerce Bookings Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
- WooCommerce Bookings
- Cross-site request forgery (CSRF)
Not analysed yet 18 Dec 2023