CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4340

The BookingPress WordPress plugin before 1.0.31 suffers from an Insecure Direct Object Reference (IDOR) vulnerability in it's thank you page, allowing any visitor to display information about any booking, including full name, date, time and service booked, by manipulating the appointment_id query parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 43.4%

CVSS Severity

CVSS v3 Score 5.3

References

Products affected by CVE-2022-4340

Reputeinfosystems » Bookingpress » Version: N/A

cpe:2.3:a:reputeinfosystems:bookingpress:-
Reputeinfosystems » Bookingpress » Version: 1.0

cpe:2.3:a:reputeinfosystems:bookingpress:1.0
Reputeinfosystems » Bookingpress » Version: 1.0.1

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.1
Reputeinfosystems » Bookingpress » Version: 1.0.10

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.10
Reputeinfosystems » Bookingpress » Version: 1.0.11

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.11
Reputeinfosystems » Bookingpress » Version: 1.0.12

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.12
Reputeinfosystems » Bookingpress » Version: 1.0.13

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.13
Reputeinfosystems » Bookingpress » Version: 1.0.14

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.14
Reputeinfosystems » Bookingpress » Version: 1.0.15

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.15
Reputeinfosystems » Bookingpress » Version: 1.0.16

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.16
Reputeinfosystems » Bookingpress » Version: 1.0.17

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.17
Reputeinfosystems » Bookingpress » Version: 1.0.18

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.18
Reputeinfosystems » Bookingpress » Version: 1.0.19

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.19
Reputeinfosystems » Bookingpress » Version: 1.0.2

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.2
Reputeinfosystems » Bookingpress » Version: 1.0.20

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.20
Reputeinfosystems » Bookingpress » Version: 1.0.21

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.21
Reputeinfosystems » Bookingpress » Version: 1.0.22

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.22
Reputeinfosystems » Bookingpress » Version: 1.0.23

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.23
Reputeinfosystems » Bookingpress » Version: 1.0.24

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.24
Reputeinfosystems » Bookingpress » Version: 1.0.25

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.25
Reputeinfosystems » Bookingpress » Version: 1.0.26

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.26
Reputeinfosystems » Bookingpress » Version: 1.0.27

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.27
Reputeinfosystems » Bookingpress » Version: 1.0.28

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.28
Reputeinfosystems » Bookingpress » Version: 1.0.29

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.29
Reputeinfosystems » Bookingpress » Version: 1.0.3

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.3
Reputeinfosystems » Bookingpress » Version: 1.0.30

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.30
Reputeinfosystems » Bookingpress » Version: 1.0.4

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.4
Reputeinfosystems » Bookingpress » Version: 1.0.5

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.5
Reputeinfosystems » Bookingpress » Version: 1.0.6

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.6
Reputeinfosystems » Bookingpress » Version: 1.0.7

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.7
Reputeinfosystems » Bookingpress » Version: 1.0.8

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.8
Reputeinfosystems » Bookingpress » Version: 1.0.9

cpe:2.3:a:reputeinfosystems:bookingpress:1.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4340

Products

Pricing

Contact Us