Pricing
Case studies
Login
Start trial
BookIt
Nexcess
Developer
2.6.0.5
Latest version
4,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
14 patched
4 Mitigation rules
Bookit Staff+ Arbitrary Appointment Deletion vulnerability
< 2.6.0.5
3 days ago
Bookit Staff+ Appointment PII Disclosure vulnerability
< 2.6.0.5
3 days ago
Unauthenticated Appointment PII Disclosure vulnerability
< 2.6.0.1
13/09/2026
Bypass Vulnerability vulnerability
<= 2.6.0.3
03/09/2026
Broken Authentication vulnerability
<= 2.5.1
22/04/2026
Unauthenticated Settings Update vulnerability
< 2.5.1
31/12/2025
Missing Authorization to Unauthenticated Stripe Connection vulnerability
<= 2.5.0
12/11/2025
Price Bypass Vulnerability vulnerability
<= 2.4.0
31/01/2024
SQL Injection vulnerability
<= 2.4.3
21/12/2023
Reflected Cross Site Scripting (XSS) vulnerability
< 2.4.0
18/07/2023
Authentication Bypass Vulnerability
<= 2.3.7
20/06/2023
Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
< 2.2.9
28/02/2022
Sensitive Information Disclosure vulnerability
< 2.2.9
28/02/2022
Cross-Site Request Forgery (CSRF) vulnerability
<= 2.1.5
30/06/2021