CVE-2025-47489 WordPress Beds24 Online Booking <= 2.0.29 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in markkinchin Beds24 Online Booking allows Stored XSS. This issue affects Beds24 Online Booking: from n/a through 2.0.29...

CVE-2025-32155

CVE-2025-32155 pertains to Beds24 Online Booking (WordPress plugin). The vulnerability is an improper control of filename for include/require statements in PHP (PHP Local File Inclusion). It affects Beds24 Online Booking from an unspecified initial version up to 2.0.26 (per CVE description). The ...