Booked
by WordPress
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-22341 | Med | 0.44 | 6.7 | 0.00 | Feb 20, 2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Case-Themes Booked booked allows Authentication Abuse.This issue affects Booked: from n/a through <= 3.0.0. | ||
| CVE-2026-57747 | Med | 0.00 | 6.5 | 0.00 | Jul 2, 2026 | Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions. | ||
| CVE-2026-57746 | Hig | 0.00 | 7.1 | 0.00 | Jul 2, 2026 | Subscriber Broken Access Control in Booked <= 3.0.0 versions. |
- risk 0.44cvss 6.7epss 0.00
Authentication Bypass Using an Alternate Path or Channel vulnerability in Case-Themes Booked booked allows Authentication Abuse.This issue affects Booked: from n/a through <= 3.0.0.
- risk 0.00cvss 6.5epss 0.00
Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions.
- risk 0.00cvss 7.1epss 0.00
Subscriber Broken Access Control in Booked <= 3.0.0 versions.