WordPress security by component

Bookster – WordPress Appointment Booking Plugin

Plugin description

Bookster – WordPress Appointment Booking Plugin is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 18, 2026; the highest CVE/CNA score is 6.5.

Plugin slug: bookster

Latest vulnerability

CVE-2025-8781: Bookster – WordPress Appointment Booking Plugin: SQL injection

Bookster – WordPress Appointment Booking Plugin is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedFeb 18, 2026

Safe version guidanceSee mitigation notes

		Safe version
Feb 18, 2026	CVE-2025-8781 Bookster – WordPress Appointment Booking Plugin: SQL injection Bookster – WordPress Appointment Booking Plugin is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE4.9 NVDPending
Jun 26, 2024	CVE-2024-5071 Bookster: A security weakness Bookster is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE6.5 NVDPending