Vulnerabilities in Booking Ultra Pro

9 results

CVE-2023-32601MEDIUMWordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.12 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-32960HIGHWordPress Booking Ultra Pro plugin 1.1.12 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2024-38717HIGHWordPress Booking Ultra Pro Appointments Booking Calendar plugin <= 1.1.13 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2023-32511HIGHWordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-32236HIGHWordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-38676MEDIUMWordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.13 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2021-36854MEDIUMWordPress Booking Ultra Pro plugin <= 1.1.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesEPSS 0.3%CVE-2022-46816MEDIUMWordPress Booking Ultra Pro Plugin <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2021-36855MEDIUMWordPress Booking Ultra Pro plugin <= 1.1.4 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%