Booqable Rental Reservations Vulnerabilities

[en] Cross-Site Request Forgery (CSRF) vulnerability in Booqable Rental Software Booqable Rental allows Cross Site Request Forgery. This issue affects Booqable Rental: from n/a through 2.4.20.

Affected:

up to 2.4.20

Fix:

No patched version reported

Disclosed:

Jun 6, 2025

CVE-2025-30956 on NVD →

The Booqable Rental Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.25. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a si...

CVSS:

4.3

Affected:

up to 2.4.25

Fixed in:

2.4.26

Disclosed:

Jun 5, 2025

CVE-2025-30956 on NVD →

[en] Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Booqable Rental Software Booqable Rental plugin <= 2.4.15 versions.

Affected:

up to 2.4.16

Fixed in:

2.4.16

Disclosed:

May 10, 2023

CVE-2023-30746 on NVD →

The Booqable Rental Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booqable_company_name' value in versions up to, and including, 2.4.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and...

CVSS:

4.4

Affected:

up to 2.4.15

Fixed in:

2.4.16

Disclosed:

Apr 14, 2023

CVE-2023-30746 on NVD →