Read the docs

bookingalgorithms

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

bookingalgorithms records in CISA KEV

No bookingalgorithms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ba Book Everything 7 records MEDIUM

Records

12 records

TI-2024-21200 CVE-2024-32125 · GHSA-4r7g-8pjm-hmjc

WordPress BA Book Everything plugin <= 1.6.4 - Auth. SQL Injection vulnerability

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booking Algorithms BA Book Everything.This issue affects BA Book Everything: from n/a through 1.6.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00577 Published 2024-04-15 No fix listed CWE-89
TI-2026-63730 CVE-2026-96039 · GHSA-r85w-gp72-g77q

BA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter

Priority LOW 37

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via first_name Parameter in all versions up to, and including, 1.8.27 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00241 Published 2026-09-25 No fix listed CWE-79
TI-2026-66007 CVE-2026-102565 · GHSA-cfgg-mx22-mvjv

BA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter

Priority LOW 31

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_service_qty' parameter in all versions up to, and including, 1.8.28 due to insufficient input sanitization and out…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00307 Published 2026-10-02 No fix listed CWE-79
TI-2024-31678 CVE-2024-47360 · GHSA-p9c9-5mh2-439p

WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bookingalgorithms BA Book Everything ba-book-everything.This issue affects BA Book Everything: from n/a through <= 1.6…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-10-06 No fix listed CWE-79
TI-2024-21463 CVE-2024-32576 · GHSA-v43f-6mhr-gwc4

WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00289 Published 2024-04-18 No fix listed CWE-79
TI-2025-13198 CVE-2025-14449 · GHSA-f5xc-6j3j-hf4h

BA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode

Priority LOW 28

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's babe-search-form shortcode in all versions up to, and including, 1.8.14 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0018 Published 2025-12-19 No fix listed CWE-79
TI-2024-03426 CVE-2024-3672 · GHSA-8p8h-55m5-85pr

BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 28

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0032 Published 2024-04-16 No fix listed CWE-79
TI-2024-21485 CVE-2024-32598 · GHSA-ffg5-77xm-p7h2

WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00325 Published 2024-04-18 No fix listed CWE-79
TI-2026-19644 CVE-2026-24371 · GHSA-gwwm-vwv9-62p8

WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a throu…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00181 Published 2026-01-22 No fix listed CWE-862
Open these records in search →