Roland Murg
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Booking System | 4 | – | Nov 4, 2026 |
| Current Menu Item for Custom Post Types | 1 | – | Nov 6, 2023 |
| WP Simple Booking Calendar | 1 | – | Sep 9, 2025 |
Exploited and recent CVEs
- CVE-2026-57639 WordPress WP Booking System plugin <= 2.1.0.6 - Cross Site Scripting (XSS) vulnerability 0.1%
- CVE-2025-68515 WordPress WP Booking System plugin <= 2.0.19.12 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2025-39541 WordPress WP Simple Booking Calendar plugin <= 2.0.13 - Broken Access Control vulnerability 0.3%
- CVE-2023-49758 WordPress WP Booking System plugin <= 2.0.19.2 - Broken Access Control vulnerability 0.4%
- CVE-2024-50425 WordPress WP Booking System – Booking Calendar plugin <= 2.0.19.10 - Broken Access Control vulnerability 0.4%
- CVE-2023-46781 WordPress Current Menu Item for Custom Post Types Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%