BookingPress Appointment Booking Pro vulnerabilities

2 known vulnerabilities in BookingPress Appointment Booking Pro from Repute InfoSystems. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  BookingPress Appointment Booking Pro: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-11823Jul 1, 2026Repute InfoSystems

  The BookingPress Appointment Booking Pro plugin for WordPress is vulnerable to SQL Injection via the 'store_service_date' parameter of the bpa_assign_staffmember_to_slots() function in versions up to and including 5.7.1. This is due to the explicit use of stri

• 9.8 Critical severity

  BookingPress Appointment Booking Pro: Unrestricted Upload of File with Dangerous Type

  CVE-2026-6960May 21, 2026Repute InfoSystems

  The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' function in all versions up to, and including, 5.6. This makes it possible for unau