Pinpoint Pinpoint Booking System — known CVE vulnerabilities

Every CVE whose affected-product data names Pinpoint Pinpoint Booking System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

CVE-2024-7112 — CVSS 8.8 (high): The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘schedule’…
CVE-2023-0220 — CVSS 8.8 (high): The Pinpoint Booking System WordPress plugin before 2.9.9.2.9 does not validate and escape one of its shortcode attributes before using it…
CVE-2015-9460 — CVSS 8.8 (high): The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.
CVE-2024-13235 — CVSS 6.5 (medium): The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'language'…
CVE-2023-25062 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.2.8 versions.
CVE-2024-3636 — CVSS 5.4 (medium): The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which could allow high…
CVE-2023-45270 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.4.0 versions.