Lucene search
+L

123 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:13 a.m.10 views

CVE-2024-35735

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

9.8CVSS6.9AI score0.00402EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 2:10 a.m.11 views

CVE-2023-23895

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82...

7.2CVSS5.1AI score0.00691EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:53 a.m.10 views

CVE-2022-41790

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76...

8.8CVSS8AI score0.00466EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:54 p.m.12 views

CVE-2022-2690

A vulnerability classified as problematic was found in SourceCodester Wedding Hall Booking System. Affected by this vulnerability is an unknown functionality of the file /whbs/?page=mybookings of the component Booking Form. The manipulation of the argument Remarks leads to cross site scripting. T...

5.4CVSS6.3AI score0.00497EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:39 a.m.21 views

CVE-2024-33543

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06...

7.5CVSS6.9AI score0.00417EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:14 p.m.16 views

CVE-2024-35734

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue affects WP Time Slots Booking Form: from n/a through 1.2.10...

7.1CVSS6.7AI score0.00308EPSS
Exploits0References1
OSV
OSV
added 2024/12/09 1:15 p.m.6 views

CVE-2023-23895

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82...

7.2CVSS5.8AI score0.00691EPSS
Exploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.24 views

CVE-2023-23895

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through 1.1.82...

7.2CVSS0.00691EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:31 a.m.22 views

CVE-2023-23895 WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability

Missing Authorization vulnerability in codepeople WP Time Slots Booking Form wp-time-slots-booking-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time Slots Booking Form: from n/a through = 1.1.82...

4.7CVSS5.8AI score0.00691EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.5 views

PT-2024-12011 · Codepeople · Codepeople Wp Time Slots Booking Form

Name of the Vulnerable Software and Affected Versions: CodePeople WP Time Slots Booking Form versions 1.1.82 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For...

7.2CVSS6.9AI score0.00691EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.5 views

WordPress plugin WP Time Slots Booking Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exis...

7.2CVSS6.7AI score0.00691EPSS
Exploits0References1
OSV
OSV
added 2024/11/02 2:15 a.m.7 views

CVE-2024-10540

The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to SQL Injection via the 'service' parameter of the bookingpressform shortcode in all versions up to, and including, 1.1.16 due to insufficient escaping on the user supplied parameter a...

6.5CVSS5.9AI score0.00575EPSS
Exploits0References5
OSV
OSV
added 2024/09/24 2:15 a.m.9 views

CVE-2024-8432

The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveappearance function in all versions up to, and including, 5.0.48. This makes it possible for authenticated attackers...

4.3CVSS5.8AI score0.00395EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/09/23 12:0 a.m.10 views

PT-2024-39009 · WordPress · Webba Booking

Name of the Vulnerable Software and Affected Versions: The Appointment & Event Booking Calendar Plugin – Webba Booking plugin for WordPress versions up to, and including, 5.0.48 Description: The issue allows authenticated attackers with Subscriber-level access and above to modify the booking form...

4.3CVSS6.9AI score0.00395EPSS
Exploits0References8
Patchstack
Patchstack
added 2024/07/24 2:41 a.m.5 views

WordPress WP Booking Calendar plugin <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via bookingform Shortcode vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Booking Calendar versions = 10.2.1...

6.4CVSS5.8AI score0.00323EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/06/10 8:15 a.m.3 views

CVE-2024-35735

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11...

9.8CVSS5.8AI score0.00402EPSS
Exploits0References1
CVE
CVE
added 2024/06/10 7:43 a.m.59 views

CVE-2024-35735

CVE-2024-35735 is a Missing Authorization vulnerability in the CodePeople WP Time Slots Booking Form plugin for WordPress, affecting versions up to 1.2.11 (listed as affected from n/a through 1.2.11). The Red Hat vulnerability entry mirrors these details. The connected documents do not provide a ...

9.8CVSS7.3AI score0.00402EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/06/10 12:0 a.m.6 views

WordPress plugin WP Time Slots Booking Form security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability exis...

9.8CVSS6.7AI score0.00402EPSS
Exploits0References2
OSV
OSV
added 2024/06/09 12:15 p.m.4 views

CVE-2024-33543

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06...

7.5CVSS5.8AI score0.00417EPSS
Exploits0References1
NVD
NVD
added 2024/06/09 12:15 p.m.35 views

CVE-2024-33543

Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06...

7.5CVSS0.00417EPSS
Exploits0References1
Rows per page
Query Builder