Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-36855 EUVD-2021-23431GHSA-85qp-4q9c-33vh

WordPress Booking Ultra Pro plugin <= 1.1.4 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

Published Sep 30, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Booking Ultra Pro Product: Booking Ultra Pro (WordPress plugin) Category: Web / CMS

Description

Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.

Affected products

VendorProductAffectedFixed
Booking Ultra Pro Booking Ultra Pro (WordPress plugin) <= 1.1.4 – ≤ 1.1.4 —

References