Plugin icon

Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress

bookingpress-appointment-booking
Plugin closed

Vulnerabilities:

16

Last Updated:

February 1, 2025

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2025-04-01
Title
BookingPress < 1.1.38 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 1.1.38
CVSS
4.9 (medium)
Published
2025-01-24
Title
BookingPress < 1.1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.1.26
CVSS
6.4 (medium)
Published
2024-12-23
Title
BookingPress < 1.1.23 - Unauthenticated Export File Download
Fixed in
Fixed in 1.1.23
CVSS
4.3 (medium)
Published
2024-12-23
Title
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress < 1.1.22 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 1.1.22
CVSS
6.5 (medium)
Published
2024-11-01
Title
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress < 1.1.17 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 1.1.17
CVSS
5.3 (medium)
Published
2024-08-07
Title
Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover
Fixed in
Fixed in 1.1.8
CVSS
9.8 (critical)
Published
2024-07-16
Title
BookingPress Appointment Booking < 1.1.6 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
Fixed in
Fixed in 1.1.6
CVSS
8.8 (high)
Published
2024-07-16
Title
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin < 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload
Fixed in
Fixed in 1.1.6
CVSS
8.8 (high)
Published
2024-05-20
Title
BookingPress < 1.0.83 - Missing Authorization to Appointment Time Alteration
Fixed in
Fixed in 1.0.83
CVSS
5.3 (medium)
Published
2024-04-05
Title
BookingPress < 1.0.82 - Authenticated (Customer+) Insecure Direct Object Reference
Fixed in
Fixed in 1.0.82
CVSS
4.3 (medium)
Published
2024-04-03
Title
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin < 1.0.88 - Authenticated (Admin+) Arbitrary File Upload
Fixed in
Fixed in 1.0.88
CVSS
7.2 (high)
Published
2024-01-27
Title
BookingPress < 1.0.75 - Unauthenticated Booking Price Manipulation
Fixed in
Fixed in 1.0.75
CVSS
7.5 (high)
Published
2023-12-21
Title
BookingPress < 1.0.73 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 1.0.73
CVSS
8.8 (high)
Published
2023-11-27
Title
BookingPress < 1.0.77 - Authenticated (Administrator+) Arbitrary File Upload
Fixed in
Fixed in 1.0.77
CVSS
7.2 (high)
Published
2022-12-07
Title
BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id
Fixed in
Fixed in 1.0.31
CVSS
7.5 (high)
Published
2022-02-28
Title
BookingPress < 1.0.11 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.0.11
CVSS
8.6 (high)