Skip to content
Noroxi

booking-wp-plugin records

6 published records for vendor booking-wp-plugin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
16.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 21
  3. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2023-4691
    28Monitor

    Bookly < 22.4 - Admin+ SQLi

    HighCVSS 7.2No exploitEPSS 1%

    booking-wp-plugin · booklyOct 16, 2023

  • CVE-2018-6891
    24Monitor

    Bookly #1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-payment_details_dialog.js.

    MediumCVSS 6.1No exploitEPSS 1%

    booking-wp-plugin · booklyFeb 11, 2018

  • CVE-2023-1172
    24Monitor

    The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5

    MediumCVSS 6.1No exploitEPSS 0%

    booking-wp-plugin · booklyMar 17, 2023

  • CVE-2021-24930
    21Monitor

    Bookly < 20.3.1 - Staff Member Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    booking-wp-plugin · booklyDec 6, 2021

  • CVE-2023-5209
    19Monitor

    Bookly < 22.5 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    booking-wp-plugin · booklyNov 27, 2023

  • CVE-2023-1159
    19Monitor

    The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via service titles in versions up to, and including, 21.5 due t

    MediumCVSS 4.8No exploitEPSS 0%

    booking-wp-plugin · booklyJun 2, 2023