BA Book Everything vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

BB

Product

BA Book Everything

by bookingalgorithms · last CVE Oct 2, 2026

8

CVEs

0

On KEV

8.8

Max CVSS

1

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 3Medium 5Low 0

Severity

All severities8 Critical0 High3 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add BA Book Everything to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-14449	6.4	0%	Dec 19	BA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode Affected: through 1.8.14
CVE-2024-47360	6.1	0%	Oct 6	WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 1.6.20
CVE-2024-3672	5.4	0%	Apr 16	BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 1.6.8
CVE-2024-8794	5.3	0%	Sep 24	BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset Affected: through 1.6.20
CVE-2026-24371	4.3	0%	Jan 22	WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability Affected: through 1.8.16