Vulnerabilities

TI-2025-23033 CVE-2025-31896 · GHSA-3rgg-5jjq-pv68

WordPress GetBookingsWP Plugin <= 1.1.27 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in istmoplugins GetBookingsWP get-bookings-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetBookingsWP: from n/a through <= 1.1.27.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00348 Published 2025-04-03 No fix listed CWE-862

TI-2024-12716 CVE-2024-13677 · GHSA-36w5-5r4m-f2m6

Missing authorization in istmoplugins GetBookingsWP – Appointments Booking Calendar…

MEDIUM 41

The GetBookingsWP – Appointments Booking Calendar Plugin For WordPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.27.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0052 Published 2025-02-18 No fix listed CWE-862

TI-2024-29607 CVE-2024-44018 · GHSA-vhv5-xm77-fph6

WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability

HIGH 68

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in istmoplugins Instant Chat Floating Button for WordPress Websites instant-chat-wp allows PHP Local File Inclusion.This issue…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00557 Published 2024-10-05 No fix listed CWE-22

TI-2024-29604 CVE-2024-44015 · GHSA-jmp6-fm9v-883q

WordPress Users Control plugin <= 1.0.16 - Local File Inclusion vulnerability

LOW 36

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in istmoplugins Users Control users-control allows PHP Local File Inclusion.This issue affects Users Control: from n/a through…