iqonicdesign WPBookit

• CVE-2026-1980 Medium 5.3 WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposure 0.9%
• CVE-2026-1945 High 7.2 WPBookit <= 1.0.8 - Unauthenticated Stored Cross-Site Scripting via 'wpb_user_name' and 'wpb_user_email' Parameters 0.4%
• CVE-2025-12135 High 7.2 WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting 0.3%
• CVE-2025-7852 Critical 9.8 WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function 1.6%
• CVE-2025-6057 High 8.8 WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
• CVE-2025-6058 Critical 9.8 WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload 6.2%
• CVE-2025-3811 Critical 9.8 WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update 0.8%
• CVE-2025-3810 Critical 9.8 WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover 0.8%