Skip to content
OpenAdvisories
High · 7.5 CVE-2024-30516 EUVD-2024-28436GHSA-676x-w6cw-fj64

WordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerability

Published Jan 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking Package: from n/a through 1.6.27.

Affected products

VendorProductAffectedFixed
SaasProject Booking Package ≤ 1.6.27 —

References