Software intelligence
Important: Webba Booking Lite appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
11
Latest advisory
1 July 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
webba-booking-lite
Plugin
This catalog lists 11 known advisories affecting Webba Booking Lite. The most recent was published on 1 July 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
Advanced Booking & Appointment System – Webba Booking Calendar <= 6.4.13 - Missing Authorization
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 1 July 2026
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
May allow attackers to run scripts in visitors' browsers or hijack admin sessions.
Published 30 April 2026
Webba Booking <= 6.2.1 - Missing Authorization
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 15 December 2025
Known Webba Booking Lite advisories published by month.
CVE-2026-27409 · Published 1 July 2026
Affected versions: ≤ 6.4.13
CVE-2024-13362 · Published 30 April 2026
Affected versions: ≤ 5.0.57
CVE-2025-66530 · Published 15 December 2025
Affected versions: ≤ 6.2.1
CVE-2025-54729 · Published 14 August 2025
Affected versions: ≤ 6.0.5
CVE-2025-54036 · Published 16 July 2025
Affected versions: ≤ 5.1.20
CVE-2025-54040 · Published 16 July 2025
Affected versions: ≤ 5.1.20
CVE-2024-8432 · Published 23 September 2024
Affected versions: ≤ 5.0.48
CVE-2023-51354 · Published 26 December 2023
Affected versions: ≤ 4.5.33
CVE-2023-33999 · Published 18 July 2023
Affected versions: ≤ 4.5.28
CVE-2021-36847 · Published 15 April 2022
Affected versions: ≤ 4.2.21
CVE-2022-4974 · Published 4 March 2022
Affected versions: < 4.2.18
SiteRespond Defence matches your installed Webba Booking Lite version against this catalog when the Defence plugin is connected to your WordPress site.