Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: reputeinfosystems

CVE IDTitleCVSSSeverityPublished
CVE-2024-11726 Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection CWE-89 6.5 Medium2024-12-24
CVE-2024-10540 Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection CWE-89 5.3 Medium2024-11-02
CVE-2024-7350 Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover CWE-288 9.8 Critical2024-08-08
CVE-2024-6467 BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation CWE-73 8.8 High2024-07-17
CVE-2024-6660 BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload CWE-280 8.8 High2024-07-17
CVE-2024-3022 BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload CWE-434 7.2 High2024-04-04
CVE-2023-6219 BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload CWE-434 7.2 High2023-11-28

All 7 known CVE vulnerabilities affecting Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress with full Chinese analysis, references, and POCs where available.