WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
booking-ultra-pro
Published
2025-06-05
Title
Booking Ultra Pro < 1.1.21 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
booking-ultra-pro
Published
2025-09-03
Title
Booking Ultra Pro < 1.1.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
booking-ultra-pro
Published
2025-12-26
Title
Booking Ultra Pro <= 1.1.23 - Authenticated (Subscriber+) Information Exposure
Slug
booking-weir
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
booking-weir
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
booking-x
Published
2025-07-03
Title
Booking X 1.0 - 1.1.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via export_now() Function
Slug
bookingcom-banner-creator
Published
2021-10-05
Title
Booking.com Banner Creator < 1.4.3 - Admin+ Stored Cross-Site Scripting
Slug
bookingcom-banner-creator
Published
2024-10-14
Title
Booking.com Banner Creator <= 1.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bookingcom-product-helper
Published
2021-10-05
Title
Booking.com Product Helper < 1.0.2 - Admin+ Stored Cross-Site Scripting
Slug
bookingor
Published
2025-04-04
Title
Bookingor < 2.0.2 - Missing Authorization
Slug
bookingor
Published
2025-12-29
Title
Bookingor <= 2.1.7 - Subscriber+ Category Deletion
Slug
bookingpress-appointment-booking
Published
2022-02-28
Title
BookingPress < 1.0.11 - Unauthenticated SQL Injection
Slug
bookingpress-appointment-booking
Published
2022-12-07
Title
BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id
Slug
bookingpress-appointment-booking
Published
2023-11-27
Title
BookingPress < 1.0.77 - Authenticated (Administrator+) Arbitrary File Upload
Slug
bookingpress-appointment-booking
Published
2023-12-21
Title
BookingPress < 1.0.73 - Authenticated (Contributor+) SQL Injection
Slug
bookingpress-appointment-booking
Published
2024-01-27
Title
BookingPress < 1.0.75 - Unauthenticated Booking Price Manipulation
Slug
bookingpress-appointment-booking
Published
2024-04-03
Title
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin < 1.0.88 - Authenticated (Admin+) Arbitrary File Upload
Slug
bookingpress-appointment-booking
Published
2024-04-05
Title
BookingPress < 1.0.82 - Authenticated (Customer+) Insecure Direct Object Reference
Slug
bookingpress-appointment-booking
Published
2024-05-20
Title
BookingPress < 1.0.83 - Missing Authorization to Appointment Time Alteration
Slug
bookingpress-appointment-booking
Published
2024-07-16
Title
BookingPress Appointment Booking < 1.1.6 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation
Slug
bookingpress-appointment-booking
Published
2024-07-16
Title
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin < 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload
Slug
bookingpress-appointment-booking
Published
2024-08-07
Title
Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover
Slug
bookingpress-appointment-booking
Published
2024-11-01
Title
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress < 1.1.17 - Authenticated (Subscriber+) SQL Injection
Slug
bookingpress-appointment-booking
Published
2024-12-23
Title
BookingPress < 1.1.23 - Unauthenticated Export File Download
Slug
bookingpress-appointment-booking
Published
2024-12-23
Title
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress < 1.1.22 - Authenticated (Contributor+) SQL Injection