WooCommerce Bookings

WordPress plugin · woocommerce-bookings · WordPress.org ↗

Critical

High

Known total

Unfixed

Running WooCommerce Bookings on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.5	WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service CVE.org	>=0, <3.11.0	v3.11.0	CVE-2026-14854	Oct 11, 2026
MEDIUM CVSS 4.3	WooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization CVE.org	>=0, <3.9.0	v3.9.0	CVE-2026-14853	Aug 23, 2026
MEDIUM CVSS 4.3	WooCommerce Bookings [woocommerce-bookings] < 3.9.0 WPVulnerability	< 3.9.0	v3.9.0	CVE-2026-14853	Aug 23, 2026
MEDIUM CVSS 4.3	WooCommerce Bookings [woocommerce-bookings] < 2.0.4 WPVulnerability	< 2.0.4	v2.0.4	CVE-2023-47787	Nov 14, 2023
MEDIUM CVSS 5.4	WooCommerce Bookings [woocommerce-bookings] < 1.15.79 WPVulnerability	< 1.15.79	v1.15.79	CVE-2023-32747	May 15, 2023
UNKNOWN	WooCommerce Bookings [woocommerce-bookings] < 3.11.0 WPVulnerability	< 3.11.0	v3.11.0	CVE-2026-14854	Oct 11, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.