CVE-2026-27409

MEDIUM NVD

CVSS Score 5.3

Severity MEDIUM

Published Jul 01, 2026

Vendor unknown

Description

Missing Authorization vulnerability in Webba Plugins Webba Booking allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webba Booking: from n/a through 6.4.13.

References

https://patchstack.com/database/wordpress/plugin/webba-booking-lite/vulnerability/wordpress-webba-booking-plugin-6-4-13-broken-access-control-vulnerability?_s_id=cve