Read the docs

Booking Ultra Pro

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Booking Ultra Pro records in CISA KEV

No Booking Ultra Pro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Booking Ultra Pro Appointments Booking Calendar 4 records LOW Appointments Booking Calendar 1 record LOW

Records

9 records

TI-2024-25951 CVE-2024-38717 · GHSA-mhp2-qhwr-943m

WordPress Booking Ultra Pro Appointments Booking Calendar plugin <= 1.1.13 - Local File Inclusion vulnerability

Priority LOW 32

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Booking Ultra Pro allows PHP Local File Inclusion.This issue affects Booking Ultra Pro: from n/a through 1.1.13.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00447 Published 2024-07-12 No fix listed CWE-22
TI-2024-25911 CVE-2024-38676 · GHSA-jwq9-j8fx-w889

Cross-site scripting in Booking Ultra Pro

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Booking Ultra Pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through 1.1.13.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-07-20 No fix listed CWE-79
TI-2021-14952 CVE-2021-36855 · GHSA-85qp-4q9c-33vh

Cross-site request forgery in Booking Ultra Pro

Priority LOW 27

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00275 Published 2022-09-30 No fix listed CWE-352
TI-2023-15883 CVE-2023-32601 · GHSA-q6wm-pmrv-qcfw

WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.12 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Booking Ultra Pro Booking Ultra Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Ultra Pro: from n/a through 1.1.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00476 Published 2024-12-13 No fix listed CWE-862
Open these records in search →