Bookingpress
Approved changes feed: RSS · Atom
cpe:2.3:a:reputeinfosystems:bookingpress:*:*:*:*:free:wordpress:*:*
part: a version: * update: *
| Vendor | Reputeinfosystems (49750278-e8bc-59c0-be32-c061c007e30f) |
|---|---|
| Product | Bookingpress (3723a659-e3c3-5247-b4c7-83b0633033c6) |
| Edition | * |
| Language | * |
| Software edition | free |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-31910 |
vulnerable | 2026-06-08 07:18:58.768708 |
WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows SQL Injection.This issue affects BookingPress: from n/a through <= 1.1.28.
Published: 2025-04-01T14:52:25.743Z
Updated: 2026-04-28T16:12:15.996Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24732 |
vulnerable | 2026-06-08 07:12:49.803290 |
WordPress BookingPress Plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows DOM-Based XSS.This issue affects BookingPress: from n/a through <= 1.1.25.
Published: 2025-01-24T17:25:11.183Z
Updated: 2026-04-28T16:11:33.663Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3022 |
vulnerable | 2026-06-08 06:41:52.230853 |
BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload
HIGH (7.2)
The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in the 'bookingpress_process_upload' function in all versions up to, and including 1.0.87. This allows an authenticated attacker with administrator-level capabilities or higher to upload arbitrary files on the affected site's server, enabling remote code execution.
Published: 2024-04-04T01:56:44.555Z
Updated: 2026-04-08T16:33:13.451Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34799 |
vulnerable | 2026-06-08 06:37:35.040600 |
WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82.
Published: 2024-06-11T16:35:34.523Z
Updated: 2026-04-28T16:09:51.161Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-31296 |
vulnerable | 2026-06-08 06:35:31.256790 |
WordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (4.3)
Authorization Bypass Through User-Controlled Key vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.81.
Published: 2024-04-07T18:07:00.960Z
Updated: 2026-04-28T16:09:30.576Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10540 |
vulnerable | 2026-06-08 06:23:46.908829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51405 |
vulnerable | 2026-06-08 06:16:17.460855 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.