VYPR

JetBooking

by WordPress

CVEs (1)

  • CVE-2026-3496HigMar 11, 2026
    risk 0.49cvss 7.5epss 0.00

    The JetBooking plugin for WordPress is vulnerable to SQL Injection via the 'check_in_date' parameter in all versions up to, and including, 4.0.3. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…