Bookingalgorithms - vulnerabilities (CVEs)

8 CVEs in 1 products, 1 in the last 30 days, newest from 2026-10-02.

Products

• Ba Book Everything - 8 CVEs

Newest CVEs of Bookingalgorithms

• CVE-2026-102565 - CVSS 7.2 (high), 2026-10-02: The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_service_qty' parameter in all versions up to, and…
• CVE-2026-96039 - CVSS 7.2 (high), 2026-09-25: The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via first_name Parameter in all versions up to, and including, 1.8.27…
• CVE-2026-24371 - CVSS 4.3 (medium), 2026-01-22: Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control…
• CVE-2025-14449 - CVSS 6.4 (medium), 2025-12-19: The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's babe-search-form shortcode in all versions up to,…
• CVE-2024-47360 - CVSS 7.1 (high), 2024-10-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bookingalgorithms BA Book Everything…
• CVE-2024-8794 - CVSS 5.3 (medium), 2024-09-24: The BA Book Everything plugin for WordPress is vulnerable to arbitrary password reset in all versions up to, and including, 1.6.20. This is due to the…
• CVE-2024-8795 - CVSS 8.8 (high), 2024-09-24: The BA Book Everything plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.20. This is due to missing…
• CVE-2024-3672 - CVSS 6.4 (medium), 2024-04-16: The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and…