Vulnerabilities in bookingalgorithms
9 resultsCVE-2024-8794MEDIUMBA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password ResetEPSS 0.4%CVE-2024-3672MEDIUMBA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-8795HIGHBA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account TakeoverEPSS 0.3%CVE-2024-47360HIGHWordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-102565HIGHBA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' ParameterEPSS 0.3%CVE-2026-96039HIGHBA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name ParameterEPSS 0.2%CVE-2026-39786HIGHWordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24371MEDIUMWordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-14449MEDIUMBA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form ShortcodeEPSS 0.2%