CVE-2025-31910

< 1.1.38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems BookingPre

7.6HIGH

CVE-2025-24732

< 1.1.26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems BookingPre

6.5MEDIUM

CVE-2024-10540

< 1.1.17

The Appointment Booking Calendar Plugin and Scheduling Plugin - BookingPress plugin for WordPress is vulnerable to SQL Injection v

5.3MEDIUM

CVE-2024-6660

< 1.1.6

The BookingPress - Appointment Booking Calendar Plugin and Online Scheduling Plugin for WordPress is vulnerable to unauthor

8.8HIGH

CVE-2024-6467

< 1.1.6

The BookingPress - Appointment Booking Calendar Plugin and Online Scheduling Plugin for WordPress is vulnerable to Arbitrar

8.8HIGH

CVE-2024-34799

< 1.0.83

Missing Authorization vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress: from n/a through 1.0.82.

6.5MEDIUM

CVE-2023-51405

< 1.0.75

Improper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Properly Constrained b

8.2HIGH

CVE-2024-31296

< 1.0.82

Authorization Bypass Through User-Controlled Key vulnerability in Repute Infosystems BookingPress.This issue affects BookingPress:

4.3MEDIUM

CVE-2024-3022

<= 1.0.87

The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in the 'book

7.2HIGH

CVE-2023-50841

<= 1.0.72

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems BookingPr

8.5HIGH

CVE-2023-36507

<= 1.0.64

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Repute Infosystems BookingPress - Appointment Booking

5.3MEDIUM

CVE-2023-6219

<= 1.0.76

The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'bookingp

7.2HIGH

CVE-2022-4340

< 1.0.31

The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in it's than

5.3MEDIUM

CVE-2022-0739

< 1.0.11

The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamica

9.8CRITICAL