WordPress plugin
BA Book Everything security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 12 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High4
- Medium7
- Low0
All BA Book Everything vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.8.33Update to 1.8.34 | CVE-2026-39786 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter ≤1.8.28Update to 1.8.29 | CVE-2026-102565 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting via first_name Parameter ≤1.8.27Update to 1.8.28 | CVE-2026-96039 | |
| High8.8 | Cross-Site Request Forgery to Email Address Update/Account Takeover ≤1.6.20Update to 1.6.21 | CVE-2024-8795 | |
| Critical9.9 | Authenticated (Contributor+) SQL Injection ≤1.6.4Update to 1.6.5 | CVE-2024-32125 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.8.33Update to 1.8.34
- High7.2Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter
≤1.8.28Update to 1.8.29
- High7.2Unauthenticated Stored Cross-Site Scripting via first_name Parameter
≤1.8.27Update to 1.8.28
- High8.8Cross-Site Request Forgery to Email Address Update/Account Takeover
≤1.6.20Update to 1.6.21
- Critical9.9Authenticated (Contributor+) SQL Injection
≤1.6.4Update to 1.6.5
BA Book Everything: common questions
Does BA Book Everything have known vulnerabilities?
Yes. VulnCrest Radar lists 12 known vulnerabilities in BA Book Everything: 1 critical, 4 high, 7 medium. None are known to affect version null.
How do I check which version of BA Book Everything I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent BA Book Everything vulnerability?
CVE-2026-39786, published Oct 30, 2026: BA Book Everything <= 1.8.33 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any BA Book Everything vulnerability listed in CISA KEV?
No. None of the known BA Book Everything vulnerabilities is currently listed in the CISA KEV catalog.