BO
Vendor
bookingalgorithms
8
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102565 | BB BA Book Everything bookingalgorithms | 7.2 | Oct 2 | BA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter |
| CVE-2026-96039 | BB BA Book Everything bookingalgorithms | 7.2 | Sep 25 | BA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter |
| CVE-2026-24371 | BB BA Book Everything bookingalgorithms | 4.3 | Jan 22 | WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability |
| CVE-2025-14449 | BB BA Book Everything bookingalgorithms | 6.4 | Dec 19 | BA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode |
| CVE-2024-47360 | BB BA Book Everything bookingalgorithms | 6.1 | Oct 6 | WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-8794 | BB BA Book Everything bookingalgorithms | 5.3 | Sep 24 | BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset |
| CVE-2024-8795 | BB BA Book Everything bookingalgorithms | 8.8 | Sep 24 | BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover |
| CVE-2024-3672 | BB BA Book Everything bookingalgorithms | 5.4 | Apr 16 | BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |