WPBookit

Уязвимости

• CVE-2025-7852без авторизации≤ 1.0.6

  WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function

  Критич. 9.8

• CVE-2025-6058без авторизации≤ 1.0.4

  WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload

  Критич. 9.8

• CVE-2025-3811без авторизации≤ 1.0.2

  WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update

  Критич. 9.8

• CVE-2025-3810без авторизации≤ 1.0.2

  WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover

  Критич. 9.8

• CVE-2024-54280без авторизации≤ 1.6.0

  WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability

  Критич. 9.8

• CVE-2025-6057подписчик+≤ 1.0.4

  WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload

  Высокий 8.8

• CVE-2026-1945без авторизации≤ 1.0.8

  WPBookit <= 1.0.8 - Unauthenticated Stored Cross-Site Scripting via 'wpb_user_name' and 'wpb_user_email' Parameters

  Высокий 7.2

• CVE-2025-12135без авторизации≤ 1.0.6

  WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting

  Высокий 7.2

• CVE-2025-26910без авторизации · нужен клик≤ 1.0.1

  WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability

  Средний 6.1

• CVE-2026-1980без авторизации≤ 1.0.8

  WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposure

  Средний 5.3

• CVE-2025-32254без авторизации≤ 1.0.7

  WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability

  Средний 5.3