Bookingalgorithms

8 CVEs across 1 Bookingalgorithms products. Browse Bookingalgorithms vulnerabilities, severities, and proof-of-concept exploits.

Bookingalgorithms products with known CVEs

ProductCVEs
Ba Book Everything8
Bookingalgorithms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-102565High7.22026-10-02The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_service_qty' parameter in all versions up to, and inc…
CVE-2026-96039High7.22026-09-25The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via first_name Parameter in all versions up to, and including, 1.8.27…
CVE-2026-24371Medium4.32026-01-22Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security…
CVE-2025-14449Medium6.42025-12-19The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's babe-search-form shortcode in all versions up to, and…
CVE-2024-47360High7.12024-10-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bookingalgorithms BA Book Everything ba-book-everything.T…
CVE-2024-8794Medium5.32024-09-24The BA Book Everything plugin for WordPress is vulnerable to arbitrary password reset in all versions up to, and including, 1.6.20. This is due to the reset_us…
CVE-2024-8795High8.82024-09-24The BA Book Everything plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.20. This is due to missing or…
CVE-2024-3672Medium6.42024-04-16The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'all-items' shortcode in all versions up to, and incl…