Ba Book Everything Security Vulnerabilities and Issues — Ba Book Everything CVE List

Lucene search

Ba-bookingBa Book Everything

2 matches found

CVE•added 2024/04/15 8:15 a.m.•50 views

CVE-2024-32125

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booking Algorithms BA Book Everything.This issue affects BA Book Everything: from n/a through 1.6.4.

8.8CVSS8.7AI score0.00241EPSS

CVE•added 2024/09/24 2:15 a.m.•37 views

CVE-2024-8795

The BA Book Everything plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.20. This is due to missing or incorrect nonce validation on the my_account_update() function. This makes it possible for unauthenticated attackers to update a user's acc...

8.8CVSS8.6AI score0.00076EPSS