Bookingalgorithms vulnerabilities
We track 3 vulnerabilities in Bookingalgorithms products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 2, 2026.
Latest Bookingalgorithms vulnerabilities
- 7.2 High severity
BA Book Everything: Improper Neutralization of Input During Web Page Generation
The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_service_qty' parameter in all versions up to, and including, 1.8.28 due to insufficient input sanitization and output escaping. This makes it possible for
- 7.2 High severity
BA Book Everything: Improper Neutralization of Input During Web Page Generation
The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via first_name Parameter in all versions up to, and including, 1.8.27 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate
- 8.8 High severity
BA Book Everything: Cross-Site Request Forgery
The BA Book Everything plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.20. This is due to missing or incorrect nonce validation on the my_account_update() function. This makes it possible for unauthent