Is CVE-2026-107416 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-107416?

CVE-2026-107416 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-107416

Description

Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through 6.5.2.