Plugin icon

Pinpoint Booking System – Version 2

booking-system

Vulnerabilities:

12

Last Updated:

March 4, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2025-02-20
Title
Pinpoint Booking System – #1 WordPress Booking Plugin < 2.9.9.6.0 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 2.9.9.6.0
CVSS
6.5 (medium)
Published
2024-12-05
Title
Pinpoint Booking System < 2.9.9.5.8 - Missing Authorization
Fixed in
Fixed in 2.9.9.5.8
CVSS
5.4 (medium)
Published
2024-12-02
Title
Pinpoint Booking System < 2.9.9.5.2 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 2.9.9.5.2
CVSS
6.5 (medium)
Published
2024-10-15
Title
Pinpoint Booking System < 2.9.9.5.8 - Stored XSS via CSRF
Fixed in
Fixed in 2.9.9.5.8
CVSS
7.1 (high)
Published
2024-09-06
Title
Pinpoint Booking System < 2.9.9.5.1- Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 2.9.9.5.1
CVSS
8.8 (high)
Published
2024-07-15
Title
Pinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSS
Fixed in
Fixed in 2.9.9.4.8
CVSS
3.5 (low)
Published
2023-10-13
Title
Pinpoint Booking System < 2.9.9.4.1 - Arbitrary Settings Update via CSRF
Fixed in
Fixed in 2.9.9.4.1
CVSS
4.3 (medium)
Published
2023-02-02
Title
Pinpoint Booking System < 2.9.9.2.9 - Admin+ Stored XSS
Fixed in
Fixed in 2.9.9.2.9
CVSS
3.5 (low)
Published
2023-01-23
Title
Pinpoint Booking System < 2.9.9.2.9 - Subscriber+ SQLi
Fixed in
Fixed in 2.9.9.2.9
CVSS
7.7 (high)
Published
2015-07-07
Title
Pinpoint Booking System <= 2.0 - Authenticated Blind SQL Injection
Fixed in
Fixed in 2.1
CVSS
8.8 (high)
Published
2014-08-01
Title
Booking System <= 1.2 - SQL Injection
Fixed in
Fixed in 1.3
CVSS
n/a
Published
2014-08-01
Title
Booking System - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.4
CVSS
n/a