Approved changes feed: RSS · Atom

cpe:2.3:a:bookingultrapro:booking_ultra_pro_appointments_booking_calendar:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorBookingultrapro (61a8af03-ba98-552a-bcb3-73fb7e9b02ee)
ProductBooking Ultra Pro Appointments Booking Calendar (3e9b6ce0-af84-5b25-8e3d-9b1d2a2798eb)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32960 vulnerable 2026-06-08 06:37:24.787465 WordPress Booking Ultra Pro plugin 1.1.12 - Privilege Escalation vulnerability
HIGH (8.8)
Improper Privilege Management vulnerability in Booking Ultra Pro allows Privilege Escalation.This issue affects Booking Ultra Pro: from n/a through 1.1.12.
Published: 2024-05-17T09:40:45.585Z
Updated: 2026-04-28T16:09:42.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32511 vulnerable 2026-06-08 06:04:46.444954 WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.8 versions.
Published: 2023-08-24T11:15:59.317Z
Updated: 2026-04-28T16:08:23.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46816 vulnerable 2026-06-08 05:50:39.493898 WordPress Booking Ultra Pro Plugin <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.4 versions.
Published: 2023-05-24T15:45:22.966Z
Updated: 2026-04-28T16:07:54.753Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36855 vulnerable 2026-06-08 05:32:52.618348 WordPress Booking Ultra Pro plugin <= 1.1.4 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability
MEDIUM (6.1)
Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.
Published: 2022-09-30T16:53:48.407Z
Updated: 2026-04-28T16:07:34.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36854 vulnerable 2026-06-08 05:32:52.617642 WordPress Booking Ultra Pro plugin <= 1.1.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
MEDIUM (5.4)
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress.
Published: 2022-09-30T16:52:20.535Z
Updated: 2026-04-28T16:07:34.563Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.