Reputeinfosystems Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress

• CVE-2024-11726 Medium 6.5 Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.21 - Authenticated (Contributor+) SQL Injection 0.5%
• CVE-2024-10540 Medium 5.3 Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress <= 1.1.16 - Authenticated (Subscriber+) SQL Injection 0.6%
• CVE-2024-7350 Critical 9.8 Appointment Booking Calendar Plugin and Online Scheduling Plugin – BookingPress 1.1.6 - 1.1.7 - Authentication Bypass to Account Takeover 0.7%
• CVE-2024-6467 High 8.8 BookingPress Appointment Booking <= 1.1.5 - Authenticated (Subscriber+) Arbitrary File Read to Arbitrary File Creation 0.9%
• CVE-2024-6660 High 8.8 BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update and Arbitrary File Upload 0.6%
• CVE-2024-3022 High 7.2 BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin <= 1.0.87 - Authenticated (Admin+) Arbitrary File Upload 1.6%
• CVE-2023-6219 High 7.2 BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload 1.2%