CVE-2024-30516

WordPress Booking Package plugin <= 1.6.27 - Price Manipulation vulnerability

Improper Validation of Specified Quantity in Input vulnerability in SaasProject Booking Package allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Booking Package: from n/a through 1.6.27.

We have discovered 76 live websites that are affected by CVE-2024-30516.

Run a Free Instant Scan



Affected Software

Product  Booking Package
Category Wordpress Plugins
Vulnerable Domains76 live websites (24% of Booking Package install base)
Vulnerable Versions
  • from 0 through 1.6.27
Vulnerable Versions Count10 versions ( 22% of all versions)


Common Weakness Enumeration

CWE-1284 Improper Validation of Specified Quantity in Input



Details

  • Published - Jan 5, 2026
  • Updated - Apr 28, 2026

Credits

  • Abdi Pranata | Patchstack Bug Bounty Progran (finder)

Website Distribution by Country

Number of websites using CVE-2024-30516
United States1 websites


Japan67 websites
Netherlands2 websites
Spain1 websites
Hungary1 websites
Italy1 websites
Lithuania1 websites
Slovakia1 websites

Website Distribution by TLD

Number of websites using CVE-2024-30516
.com43 websites
.jp13 websites
.co.jp6 websites
.net3 websites
.info1 websites
.it1 websites
.nl1 websites
.org1 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2024-30516

Top websites that are affected by CVE-2024-30516. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
******.org Japan***,***
********.jp Japan*,***,***
*****.jp Japan*,***,***
**********.**.jp Japan*,***,***
********.**.jp Japan*,***,***
***************.com Japan*,***,***
**.********.jp Japan*,***,***
****************.com Japan*,***,***
********.jp Japan**,***,***
***********.com Japan**,***,***
See full domain list

FAQ

CVE-2024-30516 is Improper Validation of Specified Quantity in Input in Booking Package
A total of 76 websites have been identified as vulnerable to CVE-2024-30516, based on global website indexing conducted by WebTechSurvey.
The Booking Package is affected by the CVE-2024-30516 vulnerability.
Booking Package versions up to and including 1.6.27 are vulnerable to CVE-2024-30516.