Advisories · Technology

markkinchin Beds24 Online Booking.

Every CVE that names markkinchin Beds24 Online Booking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-47489 CVE record

CVSS 6.5 Medium

WordPress Beds24 Online Booking plugin <= 2.0.29 - Cross Site Scripting (XSS) Vulnerability
- markkinchin Beds24 Online Booking
- Cross-site scripting (XSS)
Not analysed yet 7 May 2025
CVE-2025-32155 CVE record

CVSS 7.5 High

WordPress Beds24 Online Booking plugin <= 2.0.28 - Local File Inclusion vulnerability
- markkinchin Beds24 Online Booking
- File inclusion
Not analysed yet 4 Apr 2025
CVE-2025-31851 CVE record

CVSS 6.5 Medium

WordPress Beds24 Online Booking plugin <= 2.0.27 - Cross Site Scripting (XSS) vulnerability
- markkinchin Beds24 Online Booking
- Cross-site scripting (XSS)
Not analysed yet 1 Apr 2025
CVE-2024-10177 CVE record

CVSS 6.4 Medium

Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via beds24-link Shortcode
- markkinchin Beds24 Online Booking
- Cross-site scripting (XSS)
Not analysed yet 21 Nov 2024
CVE-2024-51664 CVE record

CVSS 5.9 Medium

WordPress Beds24 Online Booking plugin <= 2.0.25 - Cross Site Scripting (XSS) vulnerability
- markkinchin Beds24 Online Booking
- Cross-site scripting (XSS)
Not analysed yet 9 Nov 2024