Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-68975 EUVD-2025-205760GHSA-ffhx-92gc-w57q

WordPress Eagle Booking plugin <= 1.3.4.3 - Insecure Direct Object References (IDOR) vulnerability

Published Dec 30, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Eagle-Themes Product: Eagle Booking

Description

Authorization Bypass Through User-Controlled Key vulnerability in Eagle-Themes Eagle Booking eagle-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Eagle Booking: from n/a through <= 1.3.4.3.

Affected products

VendorProductAffectedFixed
Eagle-Themes Eagle Booking ≤ 1.3.4.3 —

References