WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
booking-system
Published
2023-10-13
Title
Pinpoint Booking System < 2.9.9.4.1 - Arbitrary Settings Update via CSRF
Slug
booking-system
Published
2024-07-15
Title
Pinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSS
Slug
booking-system
Published
2024-09-06
Title
Pinpoint Booking System < 2.9.9.5.1- Authenticated (Subscriber+) SQL Injection
Slug
booking-system
Published
2024-10-15
Title
Pinpoint Booking System < 2.9.9.5.8 - Stored XSS via CSRF
Slug
booking-system
Published
2024-12-02
Title
Pinpoint Booking System < 2.9.9.5.2 - Authenticated (Subscriber+) SQL Injection
Slug
booking-system
Published
2024-12-05
Title
Pinpoint Booking System < 2.9.9.5.8 - Missing Authorization
Slug
booking-system
Published
2025-02-20
Title
Pinpoint Booking System – #1 WordPress Booking Plugin < 2.9.9.6.0 - Authenticated (Subscriber+) SQL Injection
Slug
booking-system
Published
2026-02-20
Title
Pinpoint Booking System <= 2.9.9.6.5 - Missing Authorization
Slug
booking-system
Published
2026-08-06
Title
Pinpoint Booking System <= 2.9.9.7.1 - Unauthenticated Arbitrary Booking Price Manipulation
Slug
booking-system
Published
2026-07-31
Title
Pinpoint Booking System <= 2.9.9.6.9 - Authenticated (Administrator+) SQL Injection via 'field' Parameter
Slug
booking-system
Published
2026-08-14
Title
Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated Price Manipulation via WooCommerce 'cart_data' Parameter
Slug
booking-system-trafft
Published
2024-12-12
Title
Booking System Trafft < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
booking-system-trafft
Published
2025-08-27
Title
Booking System Trafft < 1.0.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
booking-system-trafft
Published
2026-07-28
Title
Booking System Trafft < 1.0.18 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
booking-ultra-pro
Published
2022-09-28
Title
Booking Ultra Pro < 1.1.7 - Stored Cross-Site Scripting via CSRF
Slug
booking-ultra-pro
Published
2022-09-28
Title
Booking Ultra Pro < 1.1.7 - Multiple CSRF
Slug
booking-ultra-pro
Published
2023-05-24
Title
Booking Ultra Pro < 1.1.7 - Cross-Site Request Forgery
Slug
booking-ultra-pro
Published
2023-05-10
Title
Booking Ultra Pro < 1.1.9 - Reflected XSS
Slug
booking-ultra-pro
Published
2023-05-10
Title
Booking Ultra Pro < 1.1.9 - Reflected XSS
Slug
booking-ultra-pro
Published
2023-05-12
Title
Booking Ultra Pro < 1.1.7 - Subscriber+ Settings Update
Slug
booking-ultra-pro
Published
2024-04-23
Title
Booking Ultra Pro < 1.1.13 - Authenticated (Contributor+) Privilege Escalation
Slug
booking-ultra-pro
Published
2024-07-11
Title
Booking Ultra Pro < 1.1.14 - Unauthenticated Local File Inclusion
Slug
booking-ultra-pro
Published
2024-07-17
Title
Booking Ultra Pro < 1.1.14 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates
Slug
booking-ultra-pro
Published
2024-07-10
Title
Booking Ultra Pro < 1.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
booking-ultra-pro
Published
2025-02-21
Title
Booking Ultra Pro < 1.1.20 - Reflected Cross-Site Scripting