Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-22336 EUVD-2026-25813GHSA-59mr-xp65-38wx

WordPress Directorist Booking plugin < 3.0.2 - SQL Injection vulnerability

Published Apr 27, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Directorist Booking allows SQL Injection.This issue affects Directorist Booking: from n/a before 3.0.2.

Affected products

VendorProductAffectedFixed
Directorist Booking Directorist Booking < 3.0.2 3.0.2

References