Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress vulnerabilities

5 known vulnerabilities in Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress from Reputeinfosystems. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Appointment Booking Calendar Plugin and…: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-7350Aug 8, 2024Reputeinfosystems

  The Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to authentication bypass in versions 1.1.6 to 1.1.7. This is due to the plugin not properly verifying a user's identity prior to logging them

• 8.8 High severity

  Appointment Booking Calendar Plugin and…: Missing Authorization

  CVE-2024-6660Jul 17, 2024Reputeinfosystems

  The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the bookingpress_import_data_

• 8.8 High severity

  Appointment Booking Calendar Plugin and…: External Control of File Name or Path

  CVE-2024-6467Jul 17, 2024Reputeinfosystems

  The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable to Arbitrary File Read to Arbitrary File Creation in all versions up to, and including, 1.1.5 via the 'bookingpress_save_lite_wizard_settings

• 7.2 High severity

  Appointment Booking Calendar Plugin and…: Unrestricted Upload of File with Dangerous Type

  CVE-2024-3022Apr 4, 2024ReputeinfosystemsEPSS 1.56%

  The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in the 'bookingpress_process_upload' function in all versions up to, and including 1.0.87. This allows an authenticated attacker with administ

• 7.2 High severity

  Appointment Booking Calendar Plugin and…: Unrestricted Upload of File with Dangerous Type

  CVE-2023-6219Nov 28, 2023ReputeinfosystemsEPSS 1.22%

  The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'bookingpress_process_upload' function in versions up to, and including, 1.0.76. This makes it possible for authenticated attackers with ad