PT-2026-20384 · WordPress · Bookster – Wordpress Appointment Booking Plugin
CVE-2025-8781
·
Publicado
2026-02-18
·
Atualizado
2026-02-18
CVSS v3.1
4.9
Média
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
The Bookster – WordPress Appointment Booking Plugin versions prior to 2.1.2
Description
The Bookster – WordPress Appointment Booking Plugin for WordPress is susceptible to SQL Injection through the
raw parameter. Insufficient input sanitization and inadequate SQL query preparation allow authenticated attackers with Administrator-level access or higher to inject additional SQL queries. This can lead to the extraction of sensitive information from the database.Recommendations
Update The Bookster – WordPress Appointment Booking Plugin to version 2.1.2 or later.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Bookster – Wordpress Appointment Booking Plugin