Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:02 a.m.20 views

CVE-2024-12274

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files if they exist...

7.5CVSS6.8AI score0.00639EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/01/13 12:00 a.m.24 views

PT-2025-1798 · WordPress · Appointment Booking Calendar Plugin

Name of the Vulnerable Software and Affected Versions: Appointment Booking Calendar Plugin and Scheduling Plugin versions prior to 1.1.23 Description: The export settings functionality in the Appointment Booking Calendar Plugin and Scheduling Plugin exports data to a public folder with an easily...

7.5CVSS9.2AI score0.00639EPSS
SaveExploits1References10
Cvelist
Cvelist
added 2024/11/02 2:03 a.m.35 views

CVE-2024-10540 Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection

The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to SQL Injection via the 'service' parameter of the bookingpressform shortcode in all versions up to, and including, 1.1.16 due to insufficient escaping on the user supplied parameter a...

5.3CVSS0.00583EPSS
SaveExploits0References5
CVE
CVE
added 2023/12/28 6:37 p.m.71 views

CVE-2023-50841

CVE-2023-50841 denotes an SQL Injection in BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin by Repute Infosystems. Affected versions are listed as from n/a through 1.0.72. The Red Hat advisory confirms the flaw (improper neutralization of input in SQL) and states th...

8.8CVSS8.8AI score0.00537EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/11/30 3:26 p.m.50 views

CVE-2023-36507

Summary (CVE-2023-36507) : Affected software is the BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin for WordPress. The issue is an unauthenticated information disclosure in BookingPress versions up to and including 1.0.64, caused by exposure of sensitive server inf...

5.3CVSS6.7AI score0.00616EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2015/09/29 7:00 p.m.81 views

CVE-2015-7319

CVE-2015-7319 affects the WordPress plugin “Appointment Booking Calendar” prior to version 1.1.8. The vulnerability is a SQL injection in cpabc_appointments_admin_int_calendar_list.inc.php that allows remote attackers to execute arbitrary SQL commands via vectors related to updating the username....

7.5CVSS9.8AI score0.02433EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder