All products

bookit

WordPress · Plugin
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Bookit — Booking & Appointment Calendar <= 2.6.0.6 - Unauthenticated SQL InjectionCVE-2026-62048 bookit WordPress High Fix reported
Bookit — Booking & Appointment Calendar <= 2.6.0.6 - Missing AuthorizationCVE-2026-62019 bookit WordPress Medium Fix reported
Bookit — Booking & Appointment Calendar <= 2.6.0.5 - Missing AuthorizationCVE-2026-110900 bookit WordPress Medium Fix reported
Bookit <= 2.6.0.4 - Authenticated (Bookit Staff+) Information ExposureCVE-2026-89008 bookit WordPress Medium Fix reported
Bookit <= 2.6.0.4 - Missing AuthorizationCVE-2026-89007 bookit WordPress Medium Fix reported
Bookit — Booking & Appointment Calendar < 2.6.0.1 - Unauthenticated Information ExposureCVE-2026-88995 bookit WordPress Medium Fix reported
Bookit — Booking & Appointment Calendar <= 2.6.0.3 - Missing AuthorizationCVE-2026-84767 bookit WordPress Medium Fix reported
Bookit — Booking & Appointment Calendar <= 2.5.1 - Missing AuthorizationCVE-2026-40780 bookit WordPress Medium Fix reported
Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Settings UpdateCVE-2025-12841 bookit WordPress Medium Fix reported
Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe ConnectionCVE-2025-12633 bookit WordPress High Fix reported
BookIt <=2.4.0 - Price BypassCVE-2024-24715 bookit WordPress Medium Fix reported
BookIt <= 2.4.3 - Authenticated(Administrator+) SQL InjectionCVE-2023-50852 bookit WordPress Medium Fix reported
BookIt <= 2.3.7 - Authentication BypassCVE-2023-2834 bookit WordPress Critical Fix reported