Advisories · Technology

dotonpaper Pinpoint Booking System – Version 2.

Every CVE that names dotonpaper Pinpoint Booking System – Version 2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12128 CVE record

CVSS 5.3 Medium

Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' Parameter
- dotonpaper Pinpoint Booking System – Version 2
- CWE-20
Not analysed yet 15 Aug 2026
CVE-2026-15403 CVE record

CVSS 4.9 Medium

Pinpoint Booking System <= 2.9.9.6.9 - Authenticated (Administrator+) SQL Injection via 'field' Parameter
- dotonpaper Pinpoint Booking System – Version 2
- SQL injection
Not analysed yet 1 Aug 2026
CVE-2024-13235 CVE record

CVSS 6.5 Medium

Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL Injection
- dotonpaper Pinpoint Booking System – Version 2
- SQL injection
Not analysed yet 21 Feb 2025
CVE-2024-7112 CVE record

CVSS 8.8 High

Pinpoint Booking System <= 2.9.9.5.0- Authenticated (Subscriber+) SQL Injection
- dotonpaper Pinpoint Booking System – Version 2
- SQL injection
Not analysed yet 7 Sept 2024