← Back

Oplugins

oplugins

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Booking Manager
booking_manager
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-50840
1Oplugins
1Booking Manager
Jun 17, 2026
Dec 28, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevelop, oplugins Booking Manager.This issue affects Booking Manager: from n/a through 2.1.5.
CVE-2023-1977
1Oplugins
1Booking Manager
Jun 17, 2026
Aug 16, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber t...Show more
The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for showing events from a remote .ics file, allowing an attacker with privileges as low as Subscriber to perform SSRF attacks on the sites internal network.Show less