Read the docs

Deetronix

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Deetronix records in CISA KEV

No Deetronix vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-19828 CVE-2025-26957 · GHSA-2p6r-c283-8m75

WordPress Affiliate Coupons plugin <= 1.7.3 - Local File Inclusion vulnerability

Priority LOW 34

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Deetronix Affiliate Coupons affiliate-coupons allows PHP Local File Inclusion.This issue affects Af…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0077 Published 2025-02-25 No fix listed CWE-98
TI-2025-20192 CVE-2025-27345 · GHSA-vjp9-wj82-f2jp

WordPress Booking Ultra Pro Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Reflected XSS.This issue affects Booking Ultra Pro: from n/a thro…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
TI-2025-41615 CVE-2025-68006 · GHSA-43hj-2398-rpw2

WordPress Booking Ultra Pro plugin <= 1.1.23 - Sensitive Data Exposure vulnerability

Priority LOW 29

Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Retrieve Embedded Sensitive Data.This issue affects Booking Ultra Pro: from n/a through <= 1.1.23.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00422 Published 2026-01-22 No fix listed CWE-201
TI-2025-36301 CVE-2025-58633 · GHSA-957r-jx3m-4mwv

WordPress Booking Ultra Pro Plugin <= 1.1.21 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00169 Published 2025-09-03 No fix listed CWE-79
TI-2025-21912 CVE-2025-30637 · GHSA-8x6f-r2xv-wq6v

WordPress Booking Ultra Pro plugin <= 1.1.20 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00275 Published 2025-06-06 No fix listed CWE-79
TI-2024-05724 CVE-2024-6175 · GHSA-r2hj-7r96-5669

Booking Ultra Pro <= 1.1.13 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates

Priority LOW 24

The Booking Ultra Pro Appointments Booking Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the multiple functions called via AJAX like save_fie…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00298 Published 2024-07-18 No fix listed CWE-862
Open these records in search →