BookingPress
BookingPress
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
Vulnerability history
0 present
19 patched
7 Mitigation rules
- Unauthenticated Booking Price Manipulation vulnerability1.5.6-1.6.229/08/2026
- Unauthenticated PHP Object Injection vulnerability< 1.5.624/08/2026
- SQL Injection vulnerability<= 1.1.2801/04/2025
- Cross Site Scripting (XSS) vulnerability<= 1.1.2524/01/2025
- Unauthenticated Export File Download vulnerability< 1.1.2313/01/2025
- Authenticated (Contributor+) SQL Injection vulnerability<= 1.1.2124/12/2024
- Authenticated (Subscriber+) SQL Injection vulnerability<= 1.1.1601/11/2024
- WordPress BookingPress plugin 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover vulnerability1.1.6 - 1.1.707/08/2024
- Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload vulnerability<= 1.1.517/07/2024
- Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation vulnerability<= 1.1.517/07/2024
- Appointment Duration Manipulation vulnerability<= 1.0.8220/05/2024
- Insecure Direct Object References (IDOR) vulnerability<= 1.0.8105/04/2024
- Authenticated (Admin+) Arbitrary File Upload vulnerability<= 1.0.8704/04/2024
- Booking Price Manipulation vulnerability<= 1.0.7427/12/2023
- SQL Injection vulnerability<= 1.0.7221/12/2023
- Authenticated (Administrator+) Arbitrary File Upload vulnerability<= 1.0.7628/11/2023
- Unauth. Server Information Disclosure vulnerability<= 1.0.6413/07/2023
- Insecure direct object references (IDOR) vulnerability< 1.0.3107/12/2022
- Unauthenticated SQL Injection (SQLi) vulnerability<= 1.0.1028/02/2022