What’s Vulnerable › Products

Booking Ultra Pro vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Booking Ultra Pro version is affected

Latest Booking Ultra Pro vulnerabilities

• CVE-2023-32601 — WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.12 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2024-38676 — WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-38717 — WordPress Booking Ultra Pro Appointments Booking Calendar plugin <= 1.1.13 - Local File Inclusion vulnerability (CVSS 7.1)