Read the docs

bookingalgorithms

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

bookingalgorithms records in CISA KEV

No bookingalgorithms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ba Book Everything 7 records MEDIUM

Records

7 records in Ba Book Everything · all components

TI-2024-21200 CVE-2024-32125 · GHSA-4r7g-8pjm-hmjc

WordPress BA Book Everything plugin <= 1.6.4 - Auth. SQL Injection vulnerability

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booking Algorithms BA Book Everything.This issue affects BA Book Everything: from n/a through 1.6.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00577 Published 2024-04-15 No fix listed CWE-89
TI-2024-31678 CVE-2024-47360 · GHSA-p9c9-5mh2-439p

WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bookingalgorithms BA Book Everything ba-book-everything.This issue affects BA Book Everything: from n/a through <= 1.6…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-10-06 No fix listed CWE-79
TI-2024-21463 CVE-2024-32576 · GHSA-v43f-6mhr-gwc4

WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00289 Published 2024-04-18 No fix listed CWE-79
TI-2024-03426 CVE-2024-3672 · GHSA-8p8h-55m5-85pr

BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 28

The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and including, 1.6.8 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0032 Published 2024-04-16 No fix listed CWE-79
TI-2024-21485 CVE-2024-32598 · GHSA-ffg5-77xm-p7h2

WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Booking Algorithms BA Book Everything allows Stored XSS.This issue affects BA Book Everything: from n/a through 1.6.8.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00325 Published 2024-04-18 No fix listed CWE-79
Open these records in search →