Read the docs

rezgo

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

rezgo records in CISA KEV

No rezgo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rezgo Online Booking 2 records HIGH Online Booking 1 record LOW

Records

3 records

TI-2024-35998 CVE-2024-53800 · GHSA-8w32-3h9r-m2h5

WordPress Rezgo Online Booking plugin <= 4.17 - Local File Inclusion vulnerability

Priority HIGH 70

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in rezgo Rezgo rezgo allows PHP Local File Inclusion.This issue affects Rezgo: from n/a through <= 4.1…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00698 Published 2025-01-07 No fix listed CWE-98
TI-2022-01791 CVE-2022-1932 · GHSA-77hw-h7rw-p297

Rezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting

Priority LOW 28

The Rezgo Online Booking WordPress plugin before 4.1.8 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00658 Published 2022-08-22 Fixed in 4.1.8 CWE-79
Open these records in search →