All products
wp-base-booking-of-appointments-services-and-events
WordPress · Plugin11 reports
| Report | Product | Ecosystem | Severity | Fix status | Last updated |
| WP BASE Booking of Appointments, Services and Events <= 6.5.2 - Authenticated (Subscriber+) Privilege EscalationCVE-2026-118086 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
Medium
|
No fix reported |
|
| WP BASE Booking of Appointments, Services and Events <= 6.4.0 - Unauthenticated SQL InjectionCVE-2026-103352 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
High
|
Fix reported |
|
| WP BASE Booking of Appointments, Services and Events <= 6.4.0 - Authenticated (Subscriber+) SQL InjectionCVE-2026-103066 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
Medium
|
Fix reported |
|
| WP BASE Booking of Appointments, Services and Events <= 6.3.2 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-73402 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
Medium
|
Fix reported |
|
| WP BASE Booking of Appointments, Services and Events <= 6.3.0 - Unauthenticated Remote Code ExecutionCVE-2026-61962 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
Critical
|
Fix reported |
|
| WP BASE Booking of Appointments, Services and Events <= 6.3.1 - Authenticated (Subscriber+) Privilege EscalationCVE-2026-59541 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
Critical
|
Fix reported |
|
| WP BASE Booking of Appointments, Services and Events <= 5.9.0 - Unauthenticated Privilege EscalationCVE-2026-39587 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
Critical
|
Fix reported |
|
| WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Reflected Cross-Site ScriptingCVE-2024-12737 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
Medium
|
Fix reported |
|
| WP BASE Booking <= 5.0.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-22684 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
High
|
Fix reported |
|
| WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_dbCVE-2024-12558 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
Medium
|
Fix reported |
|
| WP BASE Booking of Appointments, Services and Events <= 4.9.1 - Reflected Cross-Site Scripting via status ParameterCVE-2024-12469 |
wp-base-booking-of-appointments-services-and-events |
WordPress |
Medium
|
Fix reported |
|