<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: wp-booking-system</title><description>Every new CVE for wp-booking-system.</description><link>https://agentprime.io/</link><item><title>CVE-2026-109147: WP Booking System &lt; 2.1.0.3 - Reflected XSS via &apos;booking_id&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-109147/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-109147/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 21 Oct 2026 06:00:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107126: WP Booking System &lt; 2.1.0.1 - Unauthenticated Stored XSS via X-Forwarded-For Header</title><link>https://agentprime.io/advisories/CVE-2026-107126/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107126/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 06:00:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57367: WordPress WP Booking System plugin &lt; 5.12.8.1 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-57367/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57367/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 11:17:59 GMT</pubDate><category>CVE</category></item></channel></rss>