Pricing
Case studies
Login
Start trial
BA Book Everything
bookingalgorithms
Developer
1.8.16
Latest version
10,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
8 fixed
3 Mitigation rules
Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode vulnerability
<= 1.8.14
Dec 18, 2025
Reflected Cross Site Scripting (XSS) vulnerability
<= 1.6.20
Sep 30, 2024
Unauthenticated Arbitrary User Password Reset vulnerability
<= 1.6.20
Sep 24, 2024
Cross-Site Request Forgery to Email Address Update/Account Takeover vulnerability
<= 1.6.20
Sep 24, 2024
Cross Site Scripting (XSS) vulnerability
<= 1.6.8
Apr 16, 2024
Cross Site Scripting (XSS) vulnerability
<= 1.6.8
Apr 16, 2024
SQL Injection vulnerability
<= 1.6.4
Apr 12, 2024
Unauthenticated Reflected Cross-Site Scripting (XSS) and Cross-Frame Scripting (XFS) vulnerabilities
<= 1.3.24
Nov 12, 2020