bookingalgorithms vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20251
3. 20264

Newest CVEs

• CVE-2026-39786

  WordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerability

  bookingalgorithms · BA Book Everything

  High7.1
• CVE-2026-102565

  BA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter

  bookingalgorithms · BA Book Everything

  High7.2
• CVE-2026-96039

  BA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter

  bookingalgorithms · BA Book Everything

  High7.2
• CVE-2026-24371

  WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability

  bookingalgorithms · BA Book Everything

  Medium4.3
• CVE-2025-14449

  BA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode

  bookingalgorithms · BA Book Everything

  Medium6.4
• CVE-2024-47360

  WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability

  bookingalgorithms · BA Book Everything

  High7.1
• CVE-2024-8794

  BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset

  bookingalgorithms · BA Book Everything

  Medium5.3
• CVE-2024-8795

  BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover

  bookingalgorithms · BA Book Everything

  High8.8
• CVE-2024-3672

  BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  bookingalgorithms · BA Book Everything

  Medium6.4