Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

BA Book Everything — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in BA Book Everything, with AI-generated Chinese analysis, references, and POCs.

Vendor: Booking Algorithms

CVE IDTitleCVSSSeverityPublished
CVE-2026-24371 WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability CWE-862 4.3 Medium2026-01-22
CVE-2025-14449 BA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode CWE-79 6.4 Medium2025-12-19
CVE-2024-47360 WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-10-06
CVE-2024-8794 BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset CWE-620 5.3 Medium2024-09-24
CVE-2024-8795 BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover CWE-352 8.8 High2024-09-24
CVE-2024-32576 WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2024-04-18
CVE-2024-32598 WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium2024-04-18
CVE-2024-3672 BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2024-04-16
CVE-2024-32125 WordPress BA Book Everything plugin <= 1.6.4 - Auth. SQL Injection vulnerability CWE-89 8.5 High2024-04-15

All 9 known CVE vulnerabilities affecting BA Book Everything with full Chinese analysis, references, and POCs where available.