dbcve.org
Vulnerability index

Browse CVEs

6 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Pinpoint Booking System MEDIUM 6.5
CVE-2024-13235

The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'language' parameter in all ver…

Fix: after 2.9.9.5.2
Fix from $1,600 2025-02-21
Pinpoint Booking System MEDIUM 6.5
CVE-2024-7112

The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘schedule’ parameter in all ver…

Fix: 2.9.9.5.1+
Fix from $1,600 2024-09-07
Pinpoint Booking System MEDIUM 5.4
CVE-2024-3636

The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which could allow high privilege us…

Fix: 2.9.9.4.8+
Fix from $1,600 2024-08-05
Pinpoint Booking System HIGH 8.8
CVE-2023-45270

Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.4.0 versions.

Fix: after 2.9.9.4.0
Fix from $1,950 2023-10-13
Pinpoint Booking System HIGH 8.8
CVE-2023-0220

The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode attributes before using it in a SQL s…

Fix: 2.9.9.2.9+
Fix from $1,950 2023-02-13
Pinpoint Booking System HIGH 8.8
CVE-2015-9460

The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.

Fix: 2.1+
Fix from $1,950 2019-10-10