Bookingpress
Vendor:
First CVE: Mar 21, 2022 · Active for 4 years
14
Total CVEs
More Total CVEs than 92% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 84% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 48% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Bookingpress over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 21, 2022
4 years ago
Most Recent CVE
Apr 1, 2025
483 days ago
CVE Severity & Scoring
Bookingpress14 CVEs
43%
43%
14%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network14 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None13 (92.9%)
Unknown0 (0.0%)
Required1 (7.1%)
Privileges Required
Low6 (42.9%)
High3 (21.4%)
None5 (35.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-0739CRITICAL The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_fro | Mar 21, 2022 | 9.8 | 63 | NO | YES |
CVE-2024-6660HIGH The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privile | Jul 17, 2024 | 8.8 | 26 | NO | NO |
CVE-2024-6467HIGH The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable to Arbitrary File Read to Arbitrary File Creation in all vers | Jul 17, 2024 | 8.8 | 26 | NO | NO |
CVE-2023-51405CRITICAL Improper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BookingPress: from n/a t | Apr 24, 2024 | 9.8 | 26 | NO | NO |
CVE-2023-50841HIGH Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Onli | Dec 28, 2023 | 8.8 | 23 | NO | NO |
CVE-2024-10540MEDIUM The Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress plugin for WordPress is vulnerable to SQL Injection via the 'service' parameter of the bookingpress_for | Nov 2, 2024 | 6.5 | 21 | NO | NO |
CVE-2024-3022HIGH The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in the 'bookingpress_process_upload' function in all versions | Apr 4, 2024 | 7.2 | 21 | NO | NO |
CVE-2023-6219HIGH The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'bookingpress_process_upload' function in versions up to, a | Nov 28, 2023 | 7.2 | 21 | NO | NO |
CVE-2025-31910HIGH Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows SQL Inj | Apr 1, 2025 | 7.6 | 20 | NO | NO |
CVE-2022-4340MEDIUM The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in it's thank you page, allowing any visitor to display inform | Jan 2, 2023 | 5.3 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
7.1% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Bookingpress
Top CWEs
Versions
No cataloged versions.