Pinpoint Pinpoint_booking_system
7 CVEs affecting Pinpoint Pinpoint_booking_system. Latest disclosed: 2025-02-21. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7112 | High | 8.8 | 2024-09-07 | The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘schedule’ parameter in all versions up t… |
CVE-2023-0220 | High | 8.8 | 2023-02-13 | The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode attributes before using it in a SQL statement… |
CVE-2015-9460 | High | 8.8 | 2019-10-10 | The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter. |
CVE-2024-13235 | Medium | 6.5 | 2025-02-21 | The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'language' parameter in all versions up t… |
CVE-2023-25062 | Medium | 5.9 | 2023-04-06 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.2.8 versions. |
CVE-2024-3636 | Medium | 5.4 | 2024-08-05 | The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which could allow high privilege users such a… |
CVE-2023-45270 | Medium | 4.3 | 2023-10-13 | Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.4.0 versions. |