Ba Book Everything Security Vulnerabilities and Issues — Ba Book Everything CVE List

Ba-bookingBa Book Everything

7 matches found

CVE•added 2024/04/18 8:26 a.m.•75 views

CVE-2024-32598

CVE-2024-32598 affects BA Book Everything (WordPress plugin) with Stored XSS via shortcode in versions up to 1.6.8. Root cause: Improper input neutralization during web page generation. Impact per sources: potential stored XSS within affected pages; remediation: upgrade to v1.6.8 (patched). Not a...

5.9CVSS5.2AI score0.00325EPSS

CVE•added 2024/04/15 7:38 a.m.•70 views

CVE-2024-32125

CVE-2024-32125 (BA Book Everything) is an authenticated SQL Injection vulnerability in the BA Book Everything plugin (

8.8CVSS5.6AI score0.00577EPSS

CVE•added 2024/04/18 9:34 a.m.•67 views

CVE-2024-32576

The CVE-2024-32576 entry concerns the WordPress plugin BA Book Everything (WordPress Plugin) with versions ≤ 1.6.8. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by improper neutralization during web page generation, resulting in stored XSS. Affected component: the WordPress plugi...

6.5CVSS5.2AI score0.00289EPSS

CVE•added 2024/04/16 12:51 p.m.•57 views

CVE-2024-3672

CVE-2024-3672 affects BA Book Everything, a WordPress plugin. It describes Stored Cross‑Site Scripting via the plugin’s all-items shortcode in all versions up to and including 1.6.8, caused by insufficient input sanitization and output escaping for user-supplied attributes (e.g., classes). The vu...

6.4CVSS6AI score0.0032EPSS

CVE•added 2024/09/24 2:31 a.m.•55 views

CVE-2024-8794

CVE-2024-8794 affects the BA Book Everything WordPress plugin (versions

5.3CVSS6AI score0.00435EPSS

CVE•added 2024/09/24 1:56 a.m.•55 views

CVE-2024-8795

CVE-2024-8795 : The BA Book Everything WordPress plugin (versions

8.8CVSS8.6AI score0.003EPSS

CVE•added 2024/10/06 9:52 a.m.•50 views

CVE-2024-47360

CVE-2024-47360 : WordPress BA Book Everything plugin (vulnerable:

7.1CVSS5.9AI score0.00293EPSS