Roland Murg

Products

ProductCVEsExploitedLatest
WP Booking System4–Nov 4, 2026
Current Menu Item for Custom Post Types1–Nov 6, 2023
WP Simple Booking Calendar1–Sep 9, 2025

Exploited and recent CVEs

  • CVE-2026-57639 High 7.1 WordPress WP Booking System plugin <= 2.1.0.6 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-68515 Medium 5.8 WordPress WP Booking System plugin <= 2.0.19.12 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2025-39541 Medium 6.5 WordPress WP Simple Booking Calendar plugin <= 2.0.13 - Broken Access Control vulnerability 0.3%
  • CVE-2023-49758 Medium 4.3 WordPress WP Booking System plugin <= 2.0.19.2 - Broken Access Control vulnerability 0.4%
  • CVE-2024-50425 Medium 6.5 WordPress WP Booking System – Booking Calendar plugin <= 2.0.19.10 - Broken Access Control vulnerability 0.4%
  • CVE-2023-46781 Medium 4.3 WordPress Current Menu Item for Custom Post Types Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%