Booking Ultra Pro

9 CVEs across 3 Booking Ultra Pro products. Browse Booking Ultra Pro vulnerabilities, severities, and proof-of-concept exploits.

Booking Ultra Pro products with known CVEs

ProductCVEs
Booking Ultra Pro4
Booking Ultra Pro Appointments Booking Calendar Plugin3
Booking Ultra Pro (WordPress Plugin)2
Booking Ultra Pro CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-32601Medium5.42024-12-13Missing Authorization vulnerability in Booking Ultra Pro Booking Ultra Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…
CVE-2024-38676Medium6.52024-07-20Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Booking Ultra Pro allows Stored XSS.This issue aff…
CVE-2024-38717High7.12024-07-12Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Booking Ultra Pro allows PHP Local File Inclusion.This issue af…
CVE-2024-32960High8.82024-05-17Improper Privilege Management vulnerability in Booking Ultra Pro allows Privilege Escalation.This issue affects Booking Ultra Pro: from n/a through 1.1.12.
CVE-2023-32511High7.12023-08-24Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.8 versions.
CVE-2023-32236High7.12023-08-23Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin <= 1.1.8 versions.
CVE-2022-46816Medium4.32023-05-24Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.4 versions.
CVE-2021-36855Medium6.12022-09-30Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.
CVE-2021-36854Medium5.42022-09-30Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress.