Skip to content
OpenAdvisories
High · 8.5 CVE-2023-50841 EUVD-2023-55574GHSA-3x3h-vg3c-vcrx

WordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL Injection

Published Dec 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Repute InfoSystems Product: BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin: from n/a through 1.0.72.

Affected products

VendorProductAffectedFixed
Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin ≤ 1.0.72 —

References