WordPress Booking Ultra Pro Plugin <= 1.1.12 is vulnerable to Privilege Escalation

Software Booking Ultra Pro Type Plugin Vulnerable versions = 1.1.12 Fixed in 1.1.13 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2024-32960 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID 13ea86acc945 Credits Emili Castells...

WordPress Booking Activities Plugin <= 1.15.19 is vulnerable to Cross Site Scripting (XSS)

Software Booking Activities Type Plugin Vulnerable versions = 1.15.19 Fixed in 1.15.20 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30449 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 43939ea4135f Credits Jean Tirstan T Required...

WordPress Booking Package Plugin <= 1.6.27 is vulnerable to Other Vulnerability Type

Software Booking Package Type Plugin Vulnerable versions = 1.6.27 Fixed in 1.6.29 OWASP Top 10 A8: Software and Data Integrity Failures Classification Other Vulnerability Type CVE CVE-2024-30516 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 14a6927c22b5 Credits Abdi...

CVE-2023-51520

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPdevelop / Oplugins WP Booking Calendar allows Stored XSS.This issue affects WP Booking Calendar: from n/a before 9.7.4...

WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)

Software Booking Calendar Type Plugin Vulnerable versions 9.7.4 Fixed in 9.7.4 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51520 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID fef569558e95 Credits Ngô Thiên An ancorn from VNPT-VCI...

WordPress Booking Manager Plugin <= 2.1.5 is vulnerable to SQL Injection

Software Booking Manager Type Plugin Vulnerable versions = 2.1.5 Fixed in 2.1.6 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50840 Patch priority Medium CVSS severity Medium 8.5 Developer Claim ownership PSID 1f8bbef81167 Credits Ngô Thiên An ancorn from VNPT-VCI Required...

WordPress Booking Calendar Plugin <= 9.7.3 is vulnerable to Cross Site Scripting (XSS)

Software Booking Calendar Type Plugin Vulnerable versions = 9.7.3 Fixed in 9.7.3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4620 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID d1f5ad35a7a1 Credits Pablo Sanchez...

WordPress Booking Manager plugin server-side request forgery vulnerability

Linux Kernel Memory Misreference Vulnerability CNVD-2023-65164...

WordPress Plugin Booking Manager 代码问题漏洞

Linux Kernel Memory Misreference Vulnerability CNVD-2023-65164...

WordPress Booking Addon for WooCommerce Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Booking Addon for WooCommerce Type Plugin Vulnerable versions = 4.3.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1704b913b21c Credits Rafie Muhammad...

WordPress Booking Weir Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)

Software Booking Weir Type Plugin Vulnerable versions = 1.0.11 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 2f04da911473 Credits Rafie Muhammad Patchstack Required...

WordPress Booking and Rental Manager Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Booking and Rental Manager Type Plugin Vulnerable versions = 1.2.1 Fixed in 1.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-35048 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 73d697a7ce84 Credits NeginNrb...

WordPress Booking Ultra Pro Plugin <= 1.1.12 is vulnerable to Broken Access Control

Software Booking Ultra Pro Type Plugin Vulnerable versions = 1.1.12 Fixed in 1.1.13 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32601 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 63ee5e2f399e Credits Badromance 1337 Required...

WordPress Booking Manager Plugin < 2.0.29 is vulnerable to Server Side Request Forgery (SSRF)

Software Booking Manager Type Plugin Vulnerable versions 2.0.29 Fixed in 2.0.29 OWASP Top 10 A5: Broken Access Control Classification Server Side Request Forgery SSRF CVE CVE-2023-1977 Patch priority High CVSS severity High 6.4 Developer Claim ownership PSID dc7cead73df5 Credits Shreya Pohekar...

WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software Booking Ultra Pro Type Plugin Vulnerable versions = 1.1.8 Fixed in 1.1.9 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-46816 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2d94304ab1c4 Credits Nguyen Xuan Chien...

WordPress Booking Ultra Pro plugin <= 1.1.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities were discovered by Ngo Van Thien Patchstack Alliance in the WordPress Booking Ultra Pro plugin versions = 1.1.4 Solution No patched version is available...

CVE-2021-24930

The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Site Scripting issue...

CVE-2021-24930

The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Site Scripting issue...

CVE-2021-24930 Bookly < 20.3.1 - Staff Member Stored Cross-Site Scripting

The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Site Scripting issue...

PT-2019-12710 · WordPress · Wp Booking System

Name of the Vulnerable Software and Affected Versions: WP Booking System plugin version 1.5.1 Description: The issue is related to the lack of CSRF protection, which can allow attackers to exploit certain SQL injection issues that require administrative access. Recommendations: For WP Booking...