Booking Algorithms vulnerabilities
We track 2 vulnerabilities in Booking Algorithms products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 24, 2024.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Booking Algorithms vulnerabilities
- 8.8 High severity
BA Book Everything: Cross-Site Request Forgery
The BA Book Everything plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.20. This is due to missing or incorrect nonce validation on the my_account_update() function. This makes it possible for unauthent
- 8.8 High severity
BA Book Everything: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booking Algorithms BA Book Everything.This issue affects BA Book Everything: from n/a through 1.6.4.