Medium · 4.3 CVE-2023-47787 EUVD-2023-51885GHSA-xmw2-9fv2-vx29

WordPress WooCommerce Bookings Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

Published Dec 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Bookings.This issue affects WooCommerce Bookings: from n/a through 2.0.3.

Vendor	Product	Affected	Fixed
WooCommerce	WooCommerce Bookings	≤ 2.0.3	—