[ Vendor · 5 CVEs ]
murgroland
CVEs affecting murgroland published in the last 30 days, plus any murgroland CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109368 | 17 Oct 2026 | CVSS 6.5 | murgroland WP Booking System – Booking CalendarThe WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including… | |
| CVE-2026-109369 | 17 Oct 2026 | CVSS 6.8 | murgroland WP Booking System – Booking CalendarThe WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3… | |
| CVE-2026-108123 | 17 Oct 2026 | CVSS 7.5 | murgroland WP Booking System – Booking CalendarThe WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3… | |
| CVE-2026-111178 | 16 Oct 2026 | CVSS 4.9 | murgroland WP Booking System – Booking CalendarThe WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all… | |
| CVE-2026-107712 | 10 Oct 2026 | CVSS 6.5 | murgroland WP Booking System – Booking CalendarThe WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all… |