Skip to content
OpenAdvisories
High · 7.6 CVE-2025-31910 EUVD-2025-9141GHSA-454c-45cm-g8w3

WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability

Published Apr 1, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows SQL Injection.This issue affects BookingPress: from n/a through <= 1.1.28.

Affected products

VendorProductAffectedFixed
reputeinfosystems BookingPress ≤ 1.1.28 —

References