Skip to content
OpenAdvisories

Vendor

puckrobin

2 known vulnerabilities.

Products

WP BASE Booking of Appointments, Services and Events 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-12558 Public exploit

    WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db

    The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db function in all versions up to, and including, 4.9.2. This makes it possible for auth…

    puckrobin WP BASE Booking of Appointments, Services and Events Web / CMS