Webba Appointment Booking vulnerabilities and threats

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.3%	CVE-2026-97079Webba Booking (WordPress plugin) · Insecure Direct Object Reference Medium4.3EPSS 0.3%2026-09-30CVE Database V5CVE-2026-97079 Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions. EPSS 0.3%Vulnerability Webba Appointment Booking CWE-639	CVE Database V5	2026-09-30
Medium	4.3	EPSS 0.3%	CVE-2025-66530Webba Booking (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2025-12-09CVE Database V5CVE-2025-66530 Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through <= 6.2.1. EPSS 0.3%Vulnerability Webba Appointment Booking CWE-862	CVE Database V5	2025-12-09
Medium	6.5	EPSS 0.4%	CVE-2025-54040Webba Booking (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.4%2025-08-20CVE Database V5CVE-2025-54040 Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through <= 5.1.20. EPSS 0.4%Vulnerability Webba Appointment Booking	CVE Database V5	2025-08-20
Medium	5.9	EPSS 0.2%	CVE-2025-54729Webba Booking (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.2%2025-08-14CVE Database V5CVE-2025-54729 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Stored XSS.This issue affects Webba Booking: from n/a through <= 6.0.5. EPSS 0.2%Vulnerability Webba Appointment Booking	CVE Database V5	2025-08-14
Medium	4.3	EPSS 0.1%	CVE-2025-54036Webba Booking (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-07-16CVE Database V5CVE-2025-54036 Cross-Site Request Forgery (CSRF) vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Cross Site Request Forgery.This issue affects Webba Booking: from n/a through <= 5.1.20. EPSS 0.1%Vulnerability Webba Appointment Booking	CVE Database V5	2025-07-16

Page 1 of 1