Vulnerabilities and security researches forwoo-booking-bundle-hours woo-booking-bundle-hours

Sep 10, 2025

CVE, Research URL: CVE-2025-58991
Home page URL: Security reports for WooCommerce Booking Bundle Hours
Application: WooCommerce Booking Bundle Hours
Date: Sep 09, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Cristiano Zanca WooCommerce Booking Bundle Hours allows Stored XSS. This issue affects WooCommerce Booking Bundle Hours: from n/a through 0.7.4.
Affected versions: Min -, max -.
Status: vulnerable