Read the docs

markkinchin

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

markkinchin records in CISA KEV

No markkinchin vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-23253 CVE-2025-32155 · GHSA-hx22-pmf5-66mr

WordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in markkinchin Beds24 Online Booking beds24-online-booking allows PHP Local File Inclusion.This issue…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00913 Published 2025-04-04 No fix listed CWE-98
TI-2025-29986 CVE-2025-47489 · GHSA-9hv9-87gp-7pw8

WordPress Beds24 Online Booking plugin <= 2.0.29 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markkinchin Beds24 Online Booking beds24-online-booking allows Stored XSS.This issue affects Beds24 Online Booking: fr…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00266 Published 2025-05-07 No fix listed CWE-79
TI-2025-22988 CVE-2025-31851 · GHSA-jcg4-vmx5-vfm2

WordPress Beds24 Online Booking plugin <= 2.0.27 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in markkinchin Beds24 Online Booking beds24-online-booking allows Stored XSS.This issue affects Beds24 Online Booking: fr…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00368 Published 2025-04-01 No fix listed CWE-79
TI-2024-09437 CVE-2024-10177 · GHSA-969f-hj45-g74f

Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via beds24-link Shortcode

Priority LOW 29

The Beds24 Online Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's beds24-link shortcode in all versions up to, and including, 2.0.27 due to insufficient input sanitization and o…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00579 Published 2024-11-21 No fix listed CWE-79
TI-2023-28656 CVE-2023-52228 · GHSA-rwrc-gqch-prx4

WordPress Beds24 Online Booking plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Kinchin Beds24 Online Booking allows Stored XSS.This issue affects Beds24 Online Booking: from n/a through 2.0.24…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-03-27 No fix listed CWE-79
Open these records in search →