VendorsBa-bookingba_book_everythingany version
Vulnerabilities

Ba-booking Booking Algorithms BA Book Everything any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2024-32125
WordPress BA Book Everything plugin <= 1.6.4 - Auth. SQL Injection vulnerability
Published 2024-04-15 · Modified
8.8EPSS 0.006
CVE-2024-8795
BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover
Published 2024-09-24 · Analyzed
8.8EPSS 0.003
CVE-2024-47360
WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2024-10-06 · Modified
7.1EPSS 0.003
CVE-2024-32576
WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability
Published 2024-04-18 · Modified
6.5EPSS 0.003
CVE-2024-3672
BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-04-16 · Modified
6.4EPSS 0.003
CVE-2024-32598
WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability
Published 2024-04-18 · Modified
5.9EPSS 0.003
CVE-2024-8794
BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset
Published 2024-09-24 · Analyzed
5.3EPSS 0.004