Description
Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Webba Appointment Booking | Webba Booking | ≤ 6.5.0 | — |
Medium · 4.3
CVE-2026-97079
EUVD-2026-89897GHSA-hcx9-f98c-fvfx
WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack