Bbookingalgorithms

Products

Exploited and recent CVEs

• CVE-2026-39786 High 7.1 WordPress BA Book Everything plugin <= 1.8.33 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-102565 High 7.2 BA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter 0.3%
• CVE-2026-96039 High 7.2 BA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter 0.2%
• CVE-2026-24371 Medium 4.3 WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability 0.2%
• CVE-2025-14449 Medium 6.4 BA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode 0.2%
• CVE-2024-47360 High 7.1 WordPress BA Book Everything plugin <= 1.6.20 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-8794 Medium 5.3 BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset 0.4%
• CVE-2024-8795 High 8.8 BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover 0.3%
• CVE-2024-3672 Medium 6.4 BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%