All products

wp-base-booking-of-appointments-services-and-events

WordPress · Plugin
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WP BASE Booking of Appointments, Services and Events <= 6.5.2 - Authenticated (Subscriber+) Privilege EscalationCVE-2026-118086 wp-base-booking-of-appointments-services-and-events WordPress Medium No fix reported
WP BASE Booking of Appointments, Services and Events <= 6.4.0 - Unauthenticated SQL InjectionCVE-2026-103352 wp-base-booking-of-appointments-services-and-events WordPress High Fix reported
WP BASE Booking of Appointments, Services and Events <= 6.4.0 - Authenticated (Subscriber+) SQL InjectionCVE-2026-103066 wp-base-booking-of-appointments-services-and-events WordPress Medium Fix reported
WP BASE Booking of Appointments, Services and Events <= 6.3.2 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-73402 wp-base-booking-of-appointments-services-and-events WordPress Medium Fix reported
WP BASE Booking of Appointments, Services and Events <= 6.3.0 - Unauthenticated Remote Code ExecutionCVE-2026-61962 wp-base-booking-of-appointments-services-and-events WordPress Critical Fix reported
WP BASE Booking of Appointments, Services and Events <= 6.3.1 - Authenticated (Subscriber+) Privilege EscalationCVE-2026-59541 wp-base-booking-of-appointments-services-and-events WordPress Critical Fix reported
WP BASE Booking of Appointments, Services and Events <= 5.9.0 - Unauthenticated Privilege EscalationCVE-2026-39587 wp-base-booking-of-appointments-services-and-events WordPress Critical Fix reported
WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Reflected Cross-Site ScriptingCVE-2024-12737 wp-base-booking-of-appointments-services-and-events WordPress Medium Fix reported
WP BASE Booking <= 5.0.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-22684 wp-base-booking-of-appointments-services-and-events WordPress High Fix reported
WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_dbCVE-2024-12558 wp-base-booking-of-appointments-services-and-events WordPress Medium Fix reported
WP BASE Booking of Appointments, Services and Events <= 4.9.1 - Reflected Cross-Site Scripting via status ParameterCVE-2024-12469 wp-base-booking-of-appointments-services-and-events WordPress Medium Fix reported