Wpbookster

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wpbookster records in CISA KEV

No Wpbookster vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bookster 1 record LOW

Records

1 record

TI-2024-04709 CVE-2024-5071 · GHSA-xv7j-wg82-2r7g

Bookster <= 1.1.0 - Unauthenticated Appointment Status Update

LOW 29

The Bookster WordPress plugin through 1.1.0 allows adding sensitive parameters when validating appointments allowing attackers to manipulate the data sent when booking an appointment (the request body) to change its stat…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.004 Published 2024-06-26 No fix listed CWE-863

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0