VendorsPinpointpinpoint_booking_systemall versions
Vulnerabilities

Pinpoint Booking System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2015-9460
The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.
Published 2019-10-10 · Modified
8.8EPSS 0.019
CVE-2023-0220
Pinpoint Booking System < 2.9.9.2.9 - Subscriber+ SQLi
Published 2023-02-13 · Modified
8.8EPSS 0.009
CVE-2024-7112
Pinpoint Booking System <= 2.9.9.5.0- Authenticated (Subscriber+) SQL Injection
Published 2024-09-07 · Analyzed
8.8EPSS 0.005
CVE-2023-45270
WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-10-13 · Modified
8.8EPSS 0.002
CVE-2024-13235
Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL Injection
Published 2025-02-21 · Modified
6.5EPSS 0.004
CVE-2023-25062
WordPress Pinpoint Booking System Plugin <= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS)
Published 2023-04-06 · Modified
5.9EPSS 0.005
CVE-2024-3636
Pinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSS
Published 2024-08-05 · Analyzed
5.4EPSS 0.004