Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-58633 EUVD-2025-26537GHSA-957r-jx3m-4mwv

WordPress Booking Ultra Pro Plugin <= 1.1.21 - Cross Site Scripting (XSS) Vulnerability

Published Sep 3, 2025 · Updated May 13, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Deetronix Booking Ultra Pro booking-ultra-pro allows Stored XSS.This issue affects Booking Ultra Pro: from n/a through <= 1.1.21.

Affected products

VendorProductAffectedFixed
Deetronix Booking Ultra Pro ≤ 1.1.21 —

References