Vulnerabilities / WP Booking System Free version
WP Booking System Free version vulnerabilities
Advisories WPSec published for WP Booking System – Booking Calendar. Other sources may list more. Its attack surface: WP Booking System Free version on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0653 | WP Booking System Free version <= 2.1 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header | High 7.2 | 2.1.0.1 |
License: CC BY 4.0