Istmoplugins vulnerabilities
We track 3 vulnerabilities in Istmoplugins products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 18, 2025.
Latest Istmoplugins vulnerabilities
- 8.8 High severity
GetBookingsWP – Appointments Booking Calendar…: Missing Authorization
The GetBookingsWP – Appointments Booking Calendar Plugin For WordPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.27. This is due to the plugin not properly validating a user's iden
- 7.5 High severity
Instant Chat Floating Button for WordPress…: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in istmoplugins Instant Chat Floating Button for WordPress Websites instant-chat-wp allows PHP Local File Inclusion.This issue affects Instant Chat Floating Button for
- 7.5 High severity
Users Control: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in istmoplugins Users Control users-control allows PHP Local File Inclusion.This issue affects Users Control: from n/a through <= 1.0.16.