WordPress plugin
WeDesignTech Ultimate Booking Addon security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High1
- Medium2
- Low0
All WeDesignTech Ultimate Booking Addon vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤1.0.3Update to 1.0.4 | CVE-2025-69340 | |
| High8.8 | Authenticated (Subscriber+) Authentication Bypass ≤1.0.1No patch available | CVE-2026-27390 | |
| Critical9.8 | Authentication Bypass ≤1.0.1No patch available | CVE-2026-27389 | |
| Medium4.3 | Missing Authorization ≤1.0.3Update to 1.0.4 | CVE-2025-69341 |
- Medium5.3Missing Authorization
≤1.0.3Update to 1.0.4
- High8.8Authenticated (Subscriber+) Authentication Bypass
≤1.0.1No patch available
- Critical9.8Authentication Bypass
≤1.0.1No patch available
- Medium4.3Missing Authorization
≤1.0.3Update to 1.0.4
WeDesignTech Ultimate Booking Addon: common questions
Does WeDesignTech Ultimate Booking Addon have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in WeDesignTech Ultimate Booking Addon: 1 critical, 1 high, 2 medium. At least one is not fixed in the latest version.
How do I check which version of WeDesignTech Ultimate Booking Addon I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WeDesignTech Ultimate Booking Addon vulnerability?
CVE-2025-69340, published Feb 25, 2026: WeDesignTech Ultimate Booking Addon <= 1.0.3 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any WeDesignTech Ultimate Booking Addon vulnerability listed in CISA KEV?
No. None of the known WeDesignTech Ultimate Booking Addon vulnerabilities is currently listed in the CISA KEV catalog.