All 4 CVE vulnerabilities found in BookIt, with AI-generated Chinese analysis, references, and POCs.
Vendor: The Events Calendar
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-84767 | WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability CWE-345 | 5.3 | Medium | 2026-09-03 |
| CVE-2026-40780 | WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability CWE-288 | 7.5 | High | 2026-06-02 |
| CVE-2025-12841 | Bookit < 2.5.1 – Unauthenticated Settings Update | 7.5AI | High AI | 2025-12-12 |
| CVE-2024-24715 | WordPress WordPress BookIt Plugin plugin <= 2.4.0 - Price Bypass Vulnerability vulnerability CWE-1284 | 6.5 | Medium | 2024-05-17 |
All 4 known CVE vulnerabilities affecting BookIt with full Chinese analysis, references, and POCs where available.