WordPress plugin
BA Book Everything security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 12 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High4
- Medium7
- Low0
All BA Book Everything vulnerabilities
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.8.33Update to 1.8.34
- High7.2Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter
≤1.8.28Update to 1.8.29
- High7.2Unauthenticated Stored Cross-Site Scripting via first_name Parameter
≤1.8.27Update to 1.8.28
- Medium4.3Missing Authorization
≤1.8.16Update to 1.8.17
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode
≤1.8.14Update to 1.8.15
- Medium6.1Reflected Cross-Site Scripting
≤1.6.20Update to 1.6.21
- Medium5.3Unauthenticated Arbitrary User Password Reset
≤1.6.20Update to 1.6.21
- High8.8Cross-Site Request Forgery to Email Address Update/Account Takeover
≤1.6.20Update to 1.6.21
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.6.8Update to 1.6.9
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤1.6.8Update to 1.6.9
- Critical9.9Authenticated (Contributor+) SQL Injection
≤1.6.4Update to 1.6.5
- Medium6.1Cross-Site Scripting and Cross-Frame Scripting
<1.3.25Update to 1.3.25
BA Book Everything: common questions
Does BA Book Everything have known vulnerabilities?
Yes. VulnCrest Radar lists 12 known vulnerabilities in BA Book Everything: 1 critical, 4 high, 7 medium. None are known to affect version null.
How do I check which version of BA Book Everything I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent BA Book Everything vulnerability?
CVE-2026-39786, published Oct 30, 2026: BA Book Everything <= 1.8.33 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any BA Book Everything vulnerability listed in CISA KEV?
No. None of the known BA Book Everything vulnerabilities is currently listed in the CISA KEV catalog.