Approved changes feed: RSS · Atom

cpe:2.3:a:pinpoint.world:pinpoint_booking_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPinpoint.World (6848742a-3623-5802-a10f-2904cfa026b6)
ProductPinpoint Booking System (96fa69ec-4a9c-56c9-ad40-0ec8ecad2bd4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-53815 vulnerable 2026-06-08 06:54:15.573972 WordPress Pinpoint Booking System plugin <= 2.9.9.5.2 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Blind SQL Injection.This issue affects Pinpoint Booking System: from n/a through <= 2.9.9.5.1.
Published: 2024-12-06T13:05:59.279Z
Updated: 2026-04-28T16:10:46.897Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45270 vulnerable 2026-06-08 06:12:42.416051 WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.4.0 versions.
Published: 2023-10-13T15:13:34.082Z
Updated: 2026-04-28T16:08:43.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38520 vulnerable 2026-06-08 06:08:18.151869 WordPress Pinpoint Booking System plugin <= 2.9.9.3.4 - Parameter Tampering
MEDIUM (6.5)
External Control of Assumed-Immutable Web Parameter vulnerability in PINPOINT.WORLD Pinpoint Booking System allows Functionality Misuse.This issue affects Pinpoint Booking System: from n/a through 2.9.9.3.4.
Published: 2024-06-04T07:13:28.609Z
Updated: 2026-04-28T16:08:34.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25062 vulnerable 2026-06-08 05:56:08.469631 WordPress Pinpoint Booking System Plugin <= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.2.8 versions.
Published: 2023-04-06T13:59:51.159Z
Updated: 2026-04-28T16:08:07.610Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.