Skip to content
PluginCanary

Booking Package

by MASAAKI TANAKA · 10,000+ active installs · Checked 3 Nov 2026
Watch8 Warnings

Watch: vulnerability published 28 Oct 2026, fixed in 1.7.33.

78/ 100 Canary Score
Sub-scores for Booking Package
Ownership100
Maintenance100
Security60
Support50
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 28 Oct 2026, fixed in 1.7.33. Update to version 1.7.33 or later.28 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 21 Oct 2026, fixed in 1.7.31. Update to version 1.7.31 or later.21 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 1.7.31. Update to version 1.7.31 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 1.7.31. Update to version 1.7.31 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 1.7.30. Update to version 1.7.30 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 1.7.30. Update to version 1.7.30 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 1.7.30. Update to version 1.7.30 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 24 Aug 2026, fixed in 1.7.25. Update to version 1.7.25 or later.24 Aug 2026Evidence
  • InfoSEC-313 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
masaakitanaka26 Feb 2018 to 4 Nov 2026, 612 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
today
Releases, 24 months
76
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter for Booking Package
Q1 202411
Q2 202411
Q3 202413
Q4 20247
Q1 20256
Q2 202513
Q3 20257
Q4 20253
Q1 20267
Q2 202613
Q3 202610
Q4 202612

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

50% of 16 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026Booking Package < 1.7.33 - Missing Authorization5.3< 1.7.331.7.330
21 Oct 2026Booking Package < 1.7.31 - Unauthenticated Information Exposure5.3< 1.7.311.7.310
19 Oct 2026Booking Package <= 1.7.30 - Unauthenticated Information Exposure5.3<= 1.7.301.7.310
19 Oct 2026Booking Package <= 1.7.30 - Missing Authorization5.3<= 1.7.301.7.310
13 Oct 2026Booking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute6.4<= 1.7.291.7.300
13 Oct 2026Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'7.5<= 1.7.291.7.300
8 Oct 2026Booking Package <= 1.7.29 - Unauthenticated Information Exposure5.3<= 1.7.291.7.300
24 Aug 2026Booking Package < 1.7.25 - Unauthenticated Price Manipulation5.3< 1.7.251.7.250
10 Jul 2026Booking Package <= 1.7.20 - Unauthenticated SQL Injection via 'email' Form Parameter7.5<= 1.7.201.7.210
5 Jun 2026Booking Package <= 1.7.16 - Authenticated (Editor+) Privilege Escalation via Account Takeover to updateUser AJAX Action7.2<= 1.7.161.7.170
27 Apr 2026Booking Package <= 1.7.06 - Unauthenticated Price Manipulation via 'amount' Parameter5.3<= 1.7.061.7.070
21 Apr 2026Booking Package <= 1.7.06 - Missing Authorization5.3<= 1.7.061.7.070
18 Feb 2025Booking Package <= 1.6.72 - Reflected Cross-Site Scripting via Locale Parameter6.1<= 1.6.721.6.730
28 Mar 2024Booking Package <= 1.6.27 - Unauthenticated Price Manipulation5.3<= 1.6.271.6.290
7 Aug 2023Booking Package <= 1.6.01 - Reflected Cross-Site Scripting via 'mode'6.1<= 1.6.011.6.020
5 Jul 2023Booking Package <= 1.5.98 - Authorization Bypass to Arbitrary Password Reset9.8< 1.5.991.5.996
9 Mar 2022Booking Package <= 1.5.28 - Unauthenticated Sensitive Data Disclosure7.5< 1.5.291.5.29471
10 Nov 2021Booking Package <= 1.5.10 - Reflected Cross-Site Scripting6.1< 1.5.111.5.11590

Source: Wordfence Intelligence.

Reputation

Average rating rose from 1.0 to 5.0 between Q1 2024 and Q3 2025.

Rating distribution
5 star11
4 star0
3 star0
2 star1
1 star3
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Booking Package
4 May 2026259
11 May 20269,991
18 May 202610,600
25 May 2026859
1 Jun 20265,534
8 Jun 2026951
15 Jun 20265,479
22 Jun 20265,531
29 Jun 20265,590
6 Jul 20265,482
13 Jul 20261,345
20 Jul 20265,707
27 Jul 2026845
3 Aug 2026777
10 Aug 20265,150
17 Aug 202610,264
24 Aug 20265,930
31 Aug 20265,743
7 Sep 20265,568
14 Sep 2026873
21 Sep 2026804
28 Sep 20265,955
5 Oct 20265,773
12 Oct 202610,522
19 Oct 20267,234
26 Oct 202613,680
2 Nov 2026397

Weekly downloads over the last 4 weeks are 57% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SimplyBook.me - Booking and reservations calendarScore 91 · 30,000+MotoPress Hotel Booking for ElementorScore 91 · 10,000+MotoPress Hotel Booking Styles & TemplatesScore 91 · 10,000+SetmoreScore 91 · 4,000+Zenchef widget integrationScore 91 · 2,000+

Facts

Version1.7.41
AuthorMASAAKI TANAKA
Added26 Feb 2018
Last updated3 Nov 2026
Active installs10,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.2
CategoryBookings & Scheduling > Appointment Scheduling
Tagsbooking, appointment, reservation, booking calendar, 予約システム

Other plugins by this author: Free Post Mail, Reconews

Questions

Is Booking Package still maintained?

Booking Package was last updated on 3 Nov 2026. Its Canary status is Watch.

Is Booking Package safe?

Booking Package has no open unpatched vulnerabilities on record. 13 vulnerabilities were published in the last 24 months. Its Canary status is Watch.

Who owns Booking Package?

The wordpress.org author is MASAAKI TANAKA. Recent committers: masaakitanaka, plugin-master. We have recorded no ownership change.

What can I use instead of Booking Package?

Plugins in the same category with a higher Canary Score: SimplyBook.me - Booking and reservations calendar, MotoPress Hotel Booking for Elementor, MotoPress Hotel Booking Styles & Templates, Setmore, Zenchef widget integration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue