What’s Vulnerable › Products

reputeinfosystems Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your reputeinfosystems Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress version is affected

Latest reputeinfosystems Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress vulnerabilities

• CVE-2025-31910 — WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2025-24732 — WordPress BookingPress Plugin <= 1.1.25 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-11726 — Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection (CVSS 6.5)
• CVE-2024-10540 — Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5)
• CVE-2024-6660 — BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload (CVSS 8.8)
• CVE-2024-6467 — BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation (CVSS 8.8)
• CVE-2024-34799 — WordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerability (CVSS 5.3)
• CVE-2023-51405 — WordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerability (CVSS 9.8)
• CVE-2024-31296 — WordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4)
• CVE-2024-3022 — BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload (CVSS 7.2)
• CVE-2023-50841 — WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injection (CVSS 8.8)
• CVE-2023-36507 — WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure (CVSS 5.3)
• CVE-2023-6219 — BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2)
• CVE-2022-4340 — BookingPress < 1.0.31 - Unauthenticated IDOR in appointment_id (CVSS 5.3)
• CVE-2022-0739 — BookingPress < 1.0.11 - Unauthenticated SQL Injection (CVSS 9.8)