Filtered by vendor Oplugins
Subscriptions
Filtered by product Booking Manager
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-50840 | 1 Oplugins | 1 Booking Manager | 2024-11-21 | 8.5 High |
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevelop, oplugins Booking Manager.This issue affects Booking Manager: from n/a through 2.1.5. | ||||
| CVE-2023-1977 | 1 Oplugins | 1 Booking Manager | 2024-11-21 | 8.8 High |
| The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network. | ||||
Page 1 of 1.