Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Booking Ultra Pro — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting Booking Ultra Pro. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Booking Ultra Pro is a hotel reservation management system designed to streamline booking operations for hospitality businesses. Historically, it has been vulnerable to multiple security issues, including remote code execution, cross-site scripting, and privilege escalation vulnerabilities, with nine CVEs documented to date. The platform's web interface and API components have been particularly susceptible to input validation flaws, allowing unauthorized access or system compromise. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities suggests ongoing challenges in secure coding practices. Organizations implementing this solution should prioritize regular patching and security hardening to mitigate potential exploitation risks.

CVE ID Title CVSS Severity Published
CVE-2023-32601 WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.12 - Broken Access Control vulnerability — Booking Ultra Pro CWE-862 5.4 Medium 2024-12-13
CVE-2024-38676 WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability — Booking Ultra Pro CWE-79 6.5 Medium 2024-07-20
CVE-2024-38717 WordPress Booking Ultra Pro Appointments Booking Calendar plugin <= 1.1.13 - Local File Inclusion vulnerability — Booking Ultra Pro CWE-22 7.1 High 2024-07-12
CVE-2024-32960 WordPress Booking Ultra Pro plugin 1.1.12 - Privilege Escalation vulnerability — Booking Ultra Pro CWE-269 8.8 High 2024-05-17
CVE-2023-32511 WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS) — Booking Ultra Pro Appointments Booking Calendar Plugin CWE-79 7.1 High 2023-08-24
CVE-2023-32236 WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS) — Booking Ultra Pro Appointments Booking Calendar Plugin CWE-79 7.1 High 2023-08-23
CVE-2022-46816 WordPress Booking Ultra Pro Plugin <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF) — Booking Ultra Pro Appointments Booking Calendar Plugin CWE-352 4.3 Medium 2023-05-24
CVE-2021-36855 WordPress Booking Ultra Pro plugin <= 1.1.4 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability — Booking Ultra Pro (WordPress plugin) CWE-352 6.1 Medium 2022-09-30
CVE-2021-36854 WordPress Booking Ultra Pro plugin <= 1.1.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities — Booking Ultra Pro (WordPress plugin) CWE-352 5.4 Medium 2022-09-30

This page lists every published CVE security advisory associated with Booking Ultra Pro. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.