Vulnerabilities in bookingalgorithms

6 results

Vexday analysis

O Booking Algorithms apresenta um perfil de risco contido com 6 vulnerabilidades catalogadas, nenhuma delas sob exploração ativa ou com severidade crítica. A fraqueza dominante é o CWE-79 (Cross-Site Scripting), padrão em aplicações web, e o portfólio não registra divulgações recentes, sugerindo exposição estabilizada no tempo.

CVE-2024-8794MEDIUMBA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password ResetEPSS 0.4%CVE-2024-3672MEDIUMBA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-8795HIGHBA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account TakeoverEPSS 0.3%CVE-2024-47360HIGHWordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-14449MEDIUMBA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form ShortcodeEPSS 0.2%CVE-2026-24371MEDIUMWordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerabilityEPSS 0.2%