Skip to content

Dotonpaper vulnerabilities

Products

Newest

dotonpaper pinpoint booking system – version 2 Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' Parameter CVE-2026-12128 5.3 MediumAugust 15, 2026
dotonpaper pinpoint booking system Pinpoint Booking System <= 2.9.9.7.1 - Unauthenticated Arbitrary Booking Price Manipulation CVE-2026-15229 5.3 MediumAugust 10, 2026
dotonpaper pinpoint booking system – version 2 Pinpoint Booking System <= 2.9.9.6.9 - Authenticated (Administrator+) SQL Injection via 'field' Parameter CVE-2026-15403 4.9 MediumAugust 1, 2026
dotonpaper pinpoint booking system, pinpoint booking system booking system +1 more WordPress Pinpoint Booking System plugin <= 2.9.9.7.2 - Broken Access Control vulnerability CVE-2026-39678 5.3 MediumApril 8, 2026
pinpoint booking system, dotonpaper pinpoint booking system – version 2 +1 more Pinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL Injection CVE-2024-13235 6.5 MediumFebruary 21, 2025
dotonpaper pinpoint booking system WordPress Pinpoint Booking System Plugin <= 2.9.9.5.7 - Broken Access Control vulnerability CVE-2024-54252 6.3 MediumDecember 13, 2024
dotonpaper pinpoint booking system WordPress Pinpoint Booking System plugin <= 2.9.9.5.2 - SQL Injection vulnerability CVE-2024-53815 8.5 HighDecember 6, 2024
dotonpaper pinpoint booking system WordPress Pinpoint Booking System plugin <= 2.9.9.5.7 - CSRF to Stored Cross Site Scripting (XSS) vulnerability CVE-2024-49304 5.4 MediumOctober 17, 2024
pinpoint booking system, dotonpaper pinpoint booking system – version 2 +1 more Pinpoint Booking System <= 2.9.9.5.0- Authenticated (Subscriber+) SQL Injection CVE-2024-7112 8.8 HighSeptember 7, 2024
dotonpaper pinpoint booking system, pinpoint booking system +1 more Pinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSS CVE-2024-3636 5.4 MediumAugust 5, 2024
unknown dop shortcodes, dotonpaper dot on paper shortcodes +1 more DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode CVE-2024-4377 5.4 MediumJune 21, 2024
dotonpaper pinpoint booking system, pinpoint booking system +1 more WordPress Pinpoint Booking System plugin <= 2.9.9.3.4 - Parameter Tampering CVE-2023-38520 6.5 MediumJune 4, 2024
dotonpaper pinpoint booking system, pinpoint booking system +1 more WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-45270 4.3 MediumOctober 13, 2023
dotonpaper pinpoint booking system, pinpoint booking system +1 more WordPress Pinpoint Booking System Plugin <= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25062 5.9 MediumApril 6, 2023
dotonpaper pinpoint booking system, pinpoint booking system +1 more Pinpoint Booking System < 2.9.9.2.9 - Subscriber+ SQLi CVE-2023-0220 8.8 HighFebruary 13, 2023
dotonpaper booking system SQL injection vulnerability in dopbs-backend-forms.php in the Booking System (Booking Calendar)... CVE-2014-3210 Public exploit 6.5 MediumMay 22, 2014