Advisories · Technology

Repute Infosystems BookingPress Appointment Booking Pro.

Every CVE that names Repute Infosystems BookingPress Appointment Booking Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-68566 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability
- Repute Infosystems BookingPress Appointment Booking Pro
- SQL injection
Not analysed yet 20 Aug 2026
CVE-2026-11823 CVE record

CVSS 7.5 High

BookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' Parameter
- Repute Infosystems BookingPress Appointment Booking Pro
- SQL injection
Not analysed yet 1 Jul 2026
CVE-2026-6960 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field
- Repute Infosystems BookingPress Appointment Booking Pro
- Unrestricted file upload
Not analysed yet 21 May 2026