Skip to content
OpenAdvisories

Vendor

istmoplugins

4 known vulnerabilities.

Products

GetBookingsWP – Appointments Booking Calendar Plugin For WordPress 1 Instant Chat Floating Button for WordPress Websites 1 Users Control 1 GetBookingsWP 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2024-13677

    GetBookingsWp - Appointments & Bookings Plugin Basic Version <= 1.1.27 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

    The GetBookingsWP – Appointments Booking Calendar Plugin For WordPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.27. This is due to the plugin not properly validating a user's ide…

    istmoplugins GetBookingsWP – Appointments Booking Calendar Plugin For WordPress Web / CMS
  • High 7.5
    CVE-2024-44018

    WordPress Instant Chat WP plugin <= 1.0.5 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in istmoplugins Instant Chat Floating Button for WordPress Websites instant-chat-wp allows PHP Local File Inclusion.This issue affects Instant Chat Floating Button fo…

    istmoplugins Instant Chat Floating Button for WordPress Websites Web / CMS
  • High 7.5
    CVE-2024-44015

    WordPress Users Control plugin <= 1.0.16 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in istmoplugins Users Control users-control allows PHP Local File Inclusion.This issue affects Users Control: from n/a through <= 1.0.16.

    istmoplugins Users Control