CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2024/12/24 12:00 a.m.•1 views

CVE-2024-11726: Improper Neutralization of Special Elements used in an SQL Command

The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to SQL Injection via the 'category' parameter of the 'bookingpressform' shortcode in all versions up to, and including, 1.1.21 due to insufficient escaping on the user supplied paramete...

6.5CVSS5.7AI score0.00494EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2024/11/02 12:00 a.m.•1 views

CVE-2024-10540: Improper Neutralization of Special Elements used in an SQL Command

The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to SQL Injection via the 'service' parameter of the bookingpressform shortcode in all versions up to, and including, 1.1.16 due to insufficient escaping on the user supplied parameter a...

6.5CVSS5.7AI score0.00583EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by