WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
booking-system
Published
2024-09-06
Title
Pinpoint Booking System < 2.9.9.5.1- Authenticated (Subscriber+) SQL Injection
Slug
booking-system
Published
2024-10-15
Title
Pinpoint Booking System < 2.9.9.5.8 - Stored XSS via CSRF
Slug
booking-system
Published
2024-12-02
Title
Pinpoint Booking System < 2.9.9.5.2 - Authenticated (Subscriber+) SQL Injection
Slug
booking-system
Published
2024-12-05
Title
Pinpoint Booking System < 2.9.9.5.8 - Missing Authorization
Slug
booking-system
Published
2025-02-20
Title
Pinpoint Booking System – #1 WordPress Booking Plugin < 2.9.9.6.0 - Authenticated (Subscriber+) SQL Injection
Slug
booking-system-trafft
Published
2024-12-12
Title
Booking System Trafft < 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
booking-system-trafft
Published
2025-08-27
Title
Booking System Trafft < 1.0.15 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
booking-ultra-pro
Published
2022-09-28
Title
Booking Ultra Pro < 1.1.7 - Stored Cross-Site Scripting via CSRF
Slug
booking-ultra-pro
Published
2022-09-28
Title
Booking Ultra Pro < 1.1.7 - Multiple CSRF
Slug
booking-ultra-pro
Published
2023-05-24
Title
Booking Ultra Pro < 1.1.7 - Cross-Site Request Forgery
Slug
booking-ultra-pro
Published
2023-05-10
Title
Booking Ultra Pro < 1.1.9 - Reflected XSS
Slug
booking-ultra-pro
Published
2023-05-10
Title
Booking Ultra Pro < 1.1.9 - Reflected XSS
Slug
booking-ultra-pro
Published
2023-05-12
Title
Booking Ultra Pro < 1.1.7 - Subscriber+ Settings Update
Slug
booking-ultra-pro
Published
2024-04-23
Title
Booking Ultra Pro < 1.1.13 - Authenticated (Contributor+) Privilege Escalation
Slug
booking-ultra-pro
Published
2024-07-11
Title
Booking Ultra Pro < 1.1.14 - Unauthenticated Local File Inclusion
Slug
booking-ultra-pro
Published
2024-07-17
Title
Booking Ultra Pro < 1.1.14 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates
Slug
booking-ultra-pro
Published
2024-07-10
Title
Booking Ultra Pro < 1.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
booking-ultra-pro
Published
2025-02-21
Title
Booking Ultra Pro < 1.1.20 - Reflected Cross-Site Scripting
Slug
booking-ultra-pro
Published
2025-06-05
Title
Booking Ultra Pro < 1.1.21 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
booking-ultra-pro
Published
2025-09-03
Title
Booking Ultra Pro < 1.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
booking-ultra-pro
Published
2025-12-26
Title
Booking Ultra Pro <= 1.1.23 - Authenticated (Subscriber+) Information Exposure
Slug
booking-weir
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
booking-weir
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
booking-x
Published
2025-07-03
Title
Booking X 1.0 - 1.1.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via export_now() Function
Slug
bookingcom-banner-creator
Published
2021-10-05
Title
Booking.com Banner Creator < 1.4.3 - Admin+ Stored Cross-Site Scripting