Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: puckrobin Clear all filters
TI-2024-11652 CVE-2024-12558 · GHSA-6wp4-cpxh-5846

Missing authorization in puckrobin WP BASE Booking of Appointments, Services and Events

Priority LOW 31

The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db function in all versions up to, and including,…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01272 Published 2024-12-21 No fix listed CWE-862
TI-2024-11569 CVE-2024-12469 · GHSA-jm2f-96pf-3c86

WP BASE Booking of Appointments, Services and Events <= 4.9.1 - Reflected Cross-Site Scripting via status Parameter

Priority LOW 28

The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘status’ parameter in all versions up to, and including, 4.9.1 due to insufficient inp…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00452 Published 2024-12-17 No fix listed CWE-79