Skip to content
OpenAdvisories

Vendor

Deetronix

6 known vulnerabilities.

Products

Booking Ultra Pro 4 Affiliate Coupons 1 Booking Ultra Pro Appointments Booking Calendar Plugin 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-68006

    WordPress Booking Ultra Pro plugin <= 1.1.23 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Retrieve Embedded Sensitive Data.This issue affects Booking Ultra Pro: from n/a through <= 1.1.23.

    Deetronix Booking Ultra Pro
  • Medium 6.5
    CVE-2025-58633

    WordPress Booking Ultra Pro Plugin <= 1.1.21 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through <= 1.1.21.

    Deetronix Booking Ultra Pro
  • Medium 5.9
    CVE-2025-30637

    WordPress Booking Ultra Pro plugin <= 1.1.20 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through <= 1.1.20.

    Deetronix Booking Ultra Pro
  • Medium 5.4
    CVE-2024-6175

    Booking Ultra Pro <= 1.1.13 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Updates

    The Booking Ultra Pro Appointments Booking Calendar Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the multiple functions called via AJAX like save_fields_settings, bup_delete_user_avatar, b…

    Deetronix Booking Ultra Pro Appointments Booking Calendar Plugin Web / CMS