2 matches found
CVE-2025-32254 WordPress WPBookit plugin <= 1.0.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Iqonic Design WPBookit allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WPBookit: from n/a through 1.0.1...
CVE-2024-54280
CVE-2024-54280 is an Unauthenticated SQL Injection affecting WPBookit (Iqonic Design) for WordPress, with affected versions from n/a up to 1.6.0. The vulnerability is due to improper neutralization of special elements in SQL queries. The connected Red Hat entry reiterates the same CVE and descrip...