PT-2026-1296 · Unknown · Saasproject Booking Package

Published 2026-01-05 · Updated 2026-01-05 · CVE-2024-30516

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SaasProject Booking Package versions through 1.6.27

Description An issue exists in SaasProject Booking Package related to improper validation of specified quantity in input, potentially allowing access to functionality not properly constrained by Access Control Lists (ACLs).

Recommendations Update SaasProject Booking Package to a version later than 1.6.27.

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2024-30516

Affected Products

Saasproject Booking Package

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-30516 · Security Note
• https://patchstack.com/database/wordpress/plugin/booking-package/vulnerability/wordpress-booking-package-plugin-1-6-27-price-manipulation-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/wordpress/plugin/booking-package/vulnerability/wordpress-booking-package-plugin-1-6-27-price-manipulation-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/41392 · Telegram Post
• https://twitter.com/CVEnew/status/2008220676616839406 · Twitter Post