BA Book Everything vulnerabilities

3 known vulnerabilities in BA Book Everything from Bookingalgorithms. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  BA Book Everything: Improper Neutralization of Input During Web Page Generation

  CVE-2026-102565Oct 2, 2026Bookingalgorithms

  The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_service_qty' parameter in all versions up to, and including, 1.8.28 due to insufficient input sanitization and output escaping. This makes it possible for

• 7.2 High severity

  BA Book Everything: Improper Neutralization of Input During Web Page Generation

  CVE-2026-96039Sep 25, 2026Bookingalgorithms

  The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via first_name Parameter in all versions up to, and including, 1.8.27 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate

• 8.8 High severity

  BA Book Everything: Cross-Site Request Forgery

  CVE-2024-8795Sep 24, 2024Bookingalgorithms

  The BA Book Everything plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.20. This is due to missing or incorrect nonce validation on the my_account_update() function. This makes it possible for unauthent