WordPress security by component

Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress

Plugin description

Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 24, 2024; the highest CVE/CNA score is 6.5.

Plugin slug: appointment-booking-calendar-plugin-and-scheduling-plugin-bookingpress

Latest vulnerability

CVE-2024-11726: Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress: SQL injection

Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress is affected by SQL injection. Exploitation requires at least contributor-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedDec 24, 2024

Safe version guidanceSee mitigation notes

		Safe version
Dec 24, 2024	CVE-2024-11726 Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress: SQL injection Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress is affected by SQL injection. Exploitation requires at least contributor-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.5 NVDPending