WordPress security by component

Bookme – Free Online Appointment Booking and Scheduling

Plugin description

Bookme – Free Online Appointment Booking and Scheduling is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 25, 2025; the highest CVE/CNA score is 4.9.

Plugin slug: bookme-free-appointment-booking-system

Latest vulnerability

CVE-2025-13385: Bookme – Free Online Appointment Booking and Scheduling: SQL injection

Bookme – Free Online Appointment Booking and Scheduling is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.

PublishedNov 25, 2025

Safe version guidanceSee mitigation notes

		Safe version
Nov 25, 2025	CVE-2025-13385 Bookme – Free Online Appointment Booking and Scheduling: SQL injection Bookme – Free Online Appointment Booking and Scheduling is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE4.9 NVDPending