Skip to content
Noroxi

BA Book Everything

ba-book-everything · plugin

Known security vulnerabilities for BA Book Everything. Find out in seconds which version runs on your site with WP Lens.

10 known vulnerabilities

latest Sep 25, 2026

Vulnerabilities

  • CVE-2024-8795

    BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover

    High 8.8

  • CVE-2024-32125

    WordPress BA Book Everything plugin <= 1.6.4 - Auth. SQL Injection vulnerability

    High 8.8

  • CVE-2026-96039

    BA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter

    High 7.2

  • CVE-2025-14449

    BA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode

    Medium 6.4

  • CVE-2024-47360

    WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability

    Medium 6.1

  • CVE-2024-32576

    WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-32598

    WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-3672

    BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    Medium 5.4

  • CVE-2024-8794

    BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset

    Medium 5.3

  • CVE-2026-24371

    WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory