CVE-2026-103425 | masaakitanaka Booking Package Plugin up to 1.7.29 on WordPress id cross site scripting

October 14, 2026 Yanac

A vulnerability labeled as problematic has been found in masaakitanaka Booking Package Plugin up to 1.7.29 on WordPress. The affected element is an unknown function. The manipulation of the argument ID results in cross site scripting.

This vulnerability is cataloged as CVE-2026-103425. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More