Booking Calendar | Appointment Booking | BookIt

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6. The CNA vector indicates that no prior authentication is required. The export does not disclose the endpoint, input parameter, vulnerable function or detailed input-processing path. No additional exploit mechanics are inferred. Attacker-controlled input can alter database-query semantics; the specific data reachable is not established. The structured affected range is <= 2.6.0.6.

Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.6. The CNA vector requires low-privilege authenticated access; the exact WordPress role is not disclosed. The export does not disclose the endpoint, input parameter, vulnerable function or detailed input-processing path. No additional exploit mechanics are inferred. An access-control failure can expose a restricted operation or data; the particular operation and object are not specified. The structured affected range is <= 2.6.0.6.

Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects BookIt: from n/a through 2.6.0.5. The CNA vector specifies an unauthenticated attacker and does not require victim interaction; the exact WordPress role is not identified for authenticated access. An insufficient authorization check exposes an operation or data beyond the caller's intended permissions. The export does not identify the vulnerable endpoint, action, parameter or function.

BookIt through 2.6.0.3 allows an unauthenticated requester to bypass an intended security control and reach protected functionality, exposing information or actions outside the requester's authorization.

BookIt is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess. The published affected range is n/a to < 2.5.4.1.

Bookit is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

BookIt is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

Booking Calendar | Appointment Booking | BookIt is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

BookIt is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.