istmoplugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| GetBookingsWP | 1 | – | Apr 3, 2025 |
| GetBookingsWP – Appointments Booking Calendar Plugin For WordPress | 1 | – | Feb 18, 2025 |
| Instant Chat Floating Button for WordPress Websites | 1 | – | Oct 5, 2024 |
| Users Control | 1 | – | Oct 5, 2024 |
Exploited and recent CVEs
- CVE-2025-31896 WordPress GetBookingsWP Plugin <= 1.1.27 - Broken Access Control vulnerability 0.3%
- CVE-2024-13677 GetBookingsWp - Appointments & Bookings Plugin Basic Version <= 1.1.27 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover 0.5%
- CVE-2024-44018 WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability 0.6%
- CVE-2024-44015 WordPress Users Control plugin <= 1.0.16 - Local File Inclusion vulnerability 0.6%