CVE-2026-97079 — WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability

CVE-2026-97079

WordPress Webba Booking plugin <= 6.5.0 - Insecure Direct Object References (IDOR) vulnerability PUBLISHED

Description (CNA)

Subscriber Insecure Direct Object References (IDOR) in Webba Booking <= 6.5.0 versions.

Vendor / product	Versions
Webba Appointment Booking / Webba Booking	affected n/a through 6.5.0

CWE-639

CISA-ADP

No English description supplied.

No references supplied.