What’s Vulnerable › Products

bookingalgorithms BA Book Everything vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your bookingalgorithms BA Book Everything version is affected

Latest bookingalgorithms BA Book Everything vulnerabilities

• CVE-2026-39786 — WordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-102565 — BA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter (CVSS 7.2)
• CVE-2026-96039 — BA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter (CVSS 7.2)
• CVE-2026-24371 — WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-14449 — BA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode (CVSS 6.4)
• CVE-2024-47360 — WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-8794 — BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset (CVSS 5.3)
• CVE-2024-8795 — BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover (CVSS 8.8)
• CVE-2024-32576 — WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-32598 — WordPress BA Book Everything plugin <= 1.6.8 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-3672 — BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2024-32125 — WordPress BA Book Everything plugin <= 1.6.4 - Auth. SQL Injection vulnerability (CVSS 8.8)