Vulnerabilities

TI-2023-15883 CVE-2023-32601 · GHSA-q6wm-pmrv-qcfw

WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.12 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in Booking Ultra Pro Booking Ultra Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Ultra Pro: from n/a through 1.1.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00476 Published 2024-12-13 No fix listed CWE-862

TI-2024-25911 CVE-2024-38676 · GHSA-jwq9-j8fx-w889

Cross-site scripting in Booking Ultra Pro

LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Booking Ultra Pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through 1.1.13.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-07-20 No fix listed CWE-79

TI-2024-25951 CVE-2024-38717 · GHSA-mhp2-qhwr-943m

WordPress Booking Ultra Pro Appointments Booking Calendar plugin <= 1.1.13 - Local File Inclusion vulnerability

LOW 32

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Booking Ultra Pro allows PHP Local File Inclusion.This issue affects Booking Ultra Pro: from n/a through 1.1.13.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00447 Published 2024-07-12 No fix listed CWE-22

TI-2024-21827 CVE-2024-32960 · GHSA-8m7w-h5g5-j89j

WordPress Booking Ultra Pro plugin 1.1.12 - Privilege Escalation vulnerability

MEDIUM 40

Improper Privilege Management vulnerability in Booking Ultra Pro allows Privilege Escalation.This issue affects Booking Ultra Pro: from n/a through 1.1.12.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00448 Published 2024-05-17 No fix listed CWE-269

TI-2023-15793 CVE-2023-32511 · GHSA-qh2v-jrrp-h7xv

WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.8 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-24 No fix listed CWE-79

TI-2023-15534 CVE-2023-32236 · GHSA-v27f-42vm-j45j

WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin <= 1.1.8 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-23 No fix listed CWE-79

TI-2022-23162 CVE-2022-46816 · GHSA-45p4-2fgq-26gh

WordPress Booking Ultra Pro Plugin <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-05-24 No fix listed CWE-352

TI-2021-14952 CVE-2021-36855 · GHSA-85qp-4q9c-33vh

Cross-site request forgery in Booking Ultra Pro

LOW 27

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00275 Published 2022-09-30 No fix listed CWE-352

TI-2021-14951 CVE-2021-36854 · GHSA-vr32-696f-rxpr

WordPress Booking Ultra Pro plugin <= 1.1.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

LOW 38

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00336 Published 2022-09-30 No fix listed CWE-352

Vulnerabilities

Filters