Vulnerabilities

TI-2023-15793 CVE-2023-32511 · GHSA-qh2v-jrrp-h7xv

WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.8 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-24 No fix listed CWE-79

TI-2022-23162 CVE-2022-46816 · GHSA-45p4-2fgq-26gh

WordPress Booking Ultra Pro Plugin <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-24 No fix listed CWE-352

TI-2021-14952 CVE-2021-36855 · GHSA-85qp-4q9c-33vh

Cross-site request forgery in Booking Ultra Pro

LOW 27

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00275 Published 2022-09-30 No fix listed CWE-352

TI-2021-14951 CVE-2021-36854 · GHSA-vr32-696f-rxpr

WordPress Booking Ultra Pro plugin <= 1.1.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

LOW 38

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00336 Published 2022-09-30 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)

WordPress Booking Ultra Pro Plugin <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-site request forgery in Booking Ultra Pro

WordPress Booking Ultra Pro plugin <= 1.1.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities