BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id
Priority MEDIUM 63Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in it's thank you page, allowing any visitor to display information about any booking, including full name, date, time and service booked, by manipulating the appointment_id query parameter.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00702 53rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix Fixed BookingPress (Unknown): 1.0.31
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Unknown | BookingPress | before 1.0.31 | 1.0.31 | Patch available | CNA |
- BookingPress VendorUnknown Affected before 1.0.31 Fixed in 1.0.31 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:reputeinfosystems:bookingpress:*:*:*:*:*:wordpress:*:* | before 1.0.31 | Vulnerable | reputeinfosystems |
- cpe:2.3:a:reputeinfosystems:bookingpress:*:*:*:*:*:wordpress:*:* Versions before 1.0.31 Vulnerable ·reputeinfosystems
Remediation
- Fix · CNA BookingPress (Unknown) Fixed in 1.0.31
Timeline
- 2026-10-02 Threatist record created from CVE-2022-4340
- 2026-10-03 Alias added: GHSA-7j9f-fw49-x4p8
References
More reputeinfosystems Bookingpress vulnerabilities
- TI-2022-00651 BookingPress < 1.0.11 - Unauthenticated SQL Injection CVSS 3.1CRITICAL 9.8
- TI-2023-28059 WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerability CVSS 3.1CRITICAL 9.8
- TI-2024-06000 BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation CVSS 3.1HIGH 8.8
- TI-2024-06174 Missing authorization in reputeinfosystems Appointment Booking Calendar Plugin and… CVSS 3.1HIGH 8.8
- TI-2023-27746 WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injection CVSS 3.1HIGH 8.8
- TI-2024-02829 Unrestricted file upload in reputeinfosystems Appointment Booking Calendar Plugin and… CVSS 3.1HIGH 7.2
Sources
- CVE-2022-4340 · CVE Program
- CVE-2022-4340 · NVD
- FIRST EPSS
- GHSA-7j9f-fw49-x4p8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences