Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: StylemixThemes Component: Bookit Clear all filters
TI-2023-27757 CVE-2023-50852 · GHSA-pfv5-6324-4hg9

WordPress BookIt Plugin <= 2.4.3 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Booking Calendar | Appointment Booking | BookIt.This issue affects Booking Calendar | Appointment Booki…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0053 Published 2023-12-28 No fix listed CWE-89
TI-2023-02655 CVE-2023-2834 · GHSA-x48c-rrg8-735f

BookIt <= 2.3.7 - Authentication Bypass

Priority HIGH 82

The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01914 Published 2023-06-30 No fix listed CWE-288