← Back

Dotonpaper

dotonpaper

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Booking System
booking_system
1 CVE
Dot On Paper Shortcodes
dot_on_paper_shortcodes
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-4377
1Dotonpaper
1Dot On Paper Shortcodes
Jun 17, 2026
Jun 21, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the cont...Show more
The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacksShow less
CVE-2014-3210
1Dotonpaper
1Booking System
May 6, 2026
May 22, 2014
N/A· v4
N/A· v3
6.5 MEDIUM· v2
SQL injection vulnerability in dopbs-backend-forms.php in the Booking System (Booking Calendar) plugin before 1.3 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the booking_form_id...Show more
SQL injection vulnerability in dopbs-backend-forms.php in the Booking System (Booking Calendar) plugin before 1.3 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the booking_form_id parameter to wp-admin/admin-ajax.php.Show less