7.6
High
CVE-2025-31910 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows SQL Injection.This issue affects BookingPress: from n/a through <= 1.1.28.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BookingPress 1.1 | earliest → 1.1.28 | No fix stated |
Other CVEs of BookingPress
The 6 CVEs of BookingPress →
CVE-2025-24732
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…
6.5
Medium
CVE-2024-6467
The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable…
8.8
High
CVE-2024-6660
The BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin plugin for WordPress is vulnerable…
8.8
High
CVE-2024-3022
The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in…
7.2
High