Skip to content
Noroxi

wpbookingsystem records

5 published records for vendor wpbookingsystem.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
20%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 22
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2019-12239
    28Monitor

    The WP Booking System plugin 1.5.1 for WordPress has no CSRF protection, which allows attackers to reach certain SQL injection issues that r

    HighCVSS 7.2No exploitEPSS 0%

    wpbookingsystem · wp booking systemMay 20, 2019

  • CVE-2017-2168
    24Monitor

    Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to ver

    MediumCVSS 6.1No exploitEPSS 1%

    wpbookingsystem · wp booking systemMay 22, 2017

  • CVE-2024-8797
    24Monitor

    WP Booking System – Booking Calendar <= 2.0.19.8 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    wpbookingsystem · wp booking systemSep 14, 2024

  • CVE-2021-25061
    21Monitor

    WP Booking System – Booking Calendar < 2.0.15 - Authenticated Reflected Cross-Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    wpbookingsystem · wp booking systemJan 17, 2022

  • CVE-2023-24402
    19Monitor

    WordPress WP Booking System Plugin <= 2.0.18 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    wpbookingsystem · wp booking systemApr 7, 2023