Login Request a demo
BB
Product
BA Book Everything
by bookingalgorithms · last CVE Oct 2, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 3Medium 5Low 0
Severity
All severities8Critical0High3Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BA Book Everything to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-8795
8.8
0%
Sep 24
BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover
Affected: through 1.6.20
CVE-2026-102565
7.2
0%
Oct 2
BA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter
Affected: through 1.8.28
CVE-2026-96039
7.2
0%
Sep 25
BA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter
Affected: through 1.8.27
CVE-2025-14449
6.4
0%
Dec 19
BA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode
Affected: through 1.8.14
CVE-2024-47360
6.1
0%
Oct 6
WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 1.6.20
CVE-2024-3672
5.4
0%
Apr 16
BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 1.6.8
CVE-2024-8794
5.3
0%
Sep 24
BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset
Affected: through 1.6.20
CVE-2026-24371
4.3
0%
Jan 22
WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability
Affected: through 1.8.16
Showing 8