Lucene search
+L

61 matches found

NVD
NVD
added 2026/09/03 5:17 p.m.5 views

CVE-2026-84767

Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...

5.3CVSS
SaveExploits0References1
CVE
CVE
added 2026/09/03 4:31 p.m.5 views

CVE-2026-84767

An unauthenticated bypass vulnerability affects the WordPress BookIt plugin in versions ≤ 2.6.0.3 . The flaw allows a remote attacker with no prior authentication or user interaction to trigger the bypass over the network with low complexity. The CVSS 3.1 score is 5.3 (Medium) , reflecting a low ...

5.3CVSS5.9AI score
SaveExploits0References1
EUVD
EUVD
added 2026/09/03 4:31 p.m.5 views

EUVD-2026-70579

Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...

5.3CVSS5.9AI score
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/03 2:10 a.m.18 views

WordPress Bookit < 2.5.1 - Unauthenticated Stripe Settings Update

Bookit WordPress plugin 2.5.1 contains a broken access control vulnerability caused by a publicly accessible REST endpoint allowing unauthenticated update of Stripe payment options, letting remote attackers modify payment settings without authentication. id: CVE-2025-12841 info: name: WordPress...

5.3CVSS5.9AI score0.00715EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/06/05 7:14 p.m.15 views

CVE-2026-40780

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

7.5CVSS5.4AI score0.00267EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/02 4:16 p.m.22 views

CVE-2026-40780

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

7.5CVSS0.00267EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/02 3:07 p.m.13 views

CVE-2026-40780 WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

7.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/02 3:07 p.m.11 views

CVE-2026-40780

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

7.5CVSS5.8AI score0.00267EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/02 3:07 p.m.15 views

EUVD-2026-33948

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

7.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/02 3:07 p.m.51 views

CVE-2026-40780 WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

7.5CVSS0.00267EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/02 3:07 p.m.27 views

CVE-2026-40780

CVE-2026-40780 (WordPress BookIt plugin) : Affected product is the BookIt plugin (Liquid Web / StellarWP) for WordPress. The vulnerability is a broken authentication/password-recovery bypass via an alternate path or channel, enabling password recovery exploitation. Affects BookIt versions prior t...

7.5CVSS5.8AI score0.00267EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/02 12:00 a.m.15 views

WordPress plugin BookIt 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.5CVSS5.5AI score0.00267EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/02 12:00 a.m.26 views

PT-2026-45779

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1...

7.5CVSS5.8AI score0.00267EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/04/22 2:26 p.m.16 views

WordPress BookIt plugin <= 2.5.1 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by davidfdzmorilla in WordPress Plugin BookIt versions = 2.5.1...

5.2AI score0.00267EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:00 a.m.12 views

WordPress Bookit plugin < 2.5.1 - Unauthenticated Settings Update vulnerability

Unauthenticated Settings Update vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin BookIt versions 2.5.1...

5.3CVSS5.9AI score0.00715EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/13 11:06 a.m.13 views

CVE-2025-12841

The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options...

5.3CVSS7AI score0.00715EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/12 11:15 a.m.11 views

CVE-2025-12841

The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options...

5.3CVSS0.00715EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/12 10:17 a.m.5 views

CVE-2025-12841 Bookit < 2.5.1 – Unauthenticated Settings Update

The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options...

6.7AI score0.00715EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/12 10:17 a.m.47 views

CVE-2025-12841 Bookit < 2.5.1 – Unauthenticated Settings Update

The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options...

0.00715EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/12 10:17 a.m.13 views

EUVD-2025-203065

The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugins Stripe payment options...

5.3CVSS6.5AI score0.00715EPSS
SaveExploits0References2
Rows per page
Query Builder