Skip to content
OpenAdvisories

Product · Iqonic Design

WPBookit

13 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-1980 Scanner template

    WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposure

    The WPBookit plugin for WordPress is vulnerable to unauthorized data disclosure due to a missing authorization check on the 'get_customer_list' route in all versions up to, and including, 1.0.8. This makes it possible for unauthenticated attackers to retrieve…

  • Medium 5.3

    WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Iqonic Design WPBookit wpbookit allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPBookit: from n/a through <= 1.0.7.