Approved changes feed: RSS · Atom

cpe:2.3:a:startbooking:scheduling_plugin:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorStartbooking (7d9a16ab-7c08-5961-86e7-095d34ab1041)
ProductScheduling Plugin (917bd9c7-5a39-5feb-81a4-107781de87af)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-23517 vulnerable 2026-06-08 06:29:39.865931 WordPress Scheduling Plugin – Online Booking for WordPress Plugin <= 3.5.10 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Start Booking Scheduling Plugin – Online Booking for WordPress allows Stored XSS.This issue affects Scheduling Plugin – Online Booking for WordPress: from n/a through 3.5.10.
Published: 2024-02-10T08:08:49.348Z
Updated: 2026-04-28T16:09:09.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1634 vulnerable 2026-06-08 06:27:13.904416 Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Missing Authorization to Unauthenticated Service Disconnection
MEDIUM (6.5)
The Scheduling Plugin – Online Booking for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cbsb_disconnect_settings' function in all versions up to, and including, 3.5.10. This makes it possible for unauthenticated attackers to disconnect the plugin from the startbooking service and remove connection data.
Published: 2024-06-18T02:37:12.621Z
Updated: 2026-04-08T16:56:41.676Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.