Security
فارسی
All products

bookingpress-appointment-booking

WordPress · Plugin
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price ManipulationCVE-2026-76586 bookingpress-appointment-booking WordPress High Fix reported
BookingPress <= 1.5.5 - Unauthenticated PHP Object InjectionCVE-2026-12378 bookingpress-appointment-booking WordPress High Fix reported
BookingPress <= 1.1.28 - Authenticated (Administrator+) SQL InjectionCVE-2025-31910 bookingpress-appointment-booking WordPress Medium Fix reported
BookingPress <= 1.1.25 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-24732 bookingpress-appointment-booking WordPress Medium Fix reported
BookingPress <= 1.1.22 - Unauthenticated File Export DownloadCVE-2024-12274 bookingpress-appointment-booking WordPress Medium Fix reported
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL InjectionCVE-2024-11726 bookingpress-appointment-booking WordPress Medium Fix reported
Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL InjectionCVE-2024-10540 bookingpress-appointment-booking WordPress Medium Fix reported
Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account TakeoverCVE-2024-7350 bookingpress-appointment-booking WordPress Critical Fix reported
BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File CreationCVE-2024-6467 bookingpress-appointment-booking WordPress High Fix reported
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File UploadCVE-2024-6660 bookingpress-appointment-booking WordPress High Fix reported
BookingPress <= 1.0.82 - Missing Authorization to Appointment Time AlterationCVE-2024-34799 bookingpress-appointment-booking WordPress Medium Fix reported
BookingPress <= 1.0.81 - Authenticated (Customer+) Insecure Direct Object ReferenceCVE-2024-31296 bookingpress-appointment-booking WordPress Medium Fix reported
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File UploadCVE-2024-3022 bookingpress-appointment-booking WordPress High Fix reported
BookingPress < 1.0.11 - SQL InjectionCVE-2022-0739 bookingpress-appointment-booking WordPress Critical Fix reported
BookingPress <= 1.0.72 - Authenticated (Contributor+) SQL InjectionCVE-2023-50841 bookingpress-appointment-booking WordPress High Fix reported
BookingPress <= 1.0.64 - Unauthenticated Sensitive Information ExposureCVE-2023-36507 bookingpress-appointment-booking WordPress Medium Fix reported
BookingPress <= 1.0.30 - Unauthenticated Insecure Direct Object ReferenceCVE-2022-4340 bookingpress-appointment-booking WordPress Medium Fix reported
BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File UploadCVE-2023-6219 bookingpress-appointment-booking WordPress High Fix reported
BookingPress – Appointments Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.13 - SQL Injection bookingpress-appointment-booking WordPress Medium Fix reported
BookingPress <= 1.0.74 - Booking Price Manipulation via bookingpress_confirm_bookingCVE-2023-51405 bookingpress-appointment-booking WordPress High Fix reported