Skip to contentDotonpaper Pinpoint Booking System vulnerabilities
- dotonpaper pinpoint booking system – version 2Pinpoint Booking System <= 2.9.9.6.8 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' ParameterCVE-2026-121285.3 Medium
- dotonpaper pinpoint booking systemPinpoint Booking System <= 2.9.9.7.1 - Unauthenticated Arbitrary Booking Price ManipulationCVE-2026-152295.3 Medium
- dotonpaper pinpoint booking system – version 2Pinpoint Booking System <= 2.9.9.6.9 - Authenticated (Administrator+) SQL Injection via 'field' ParameterCVE-2026-154034.9 Medium
- dotonpaper pinpoint booking system, pinpoint booking system booking system +1 moreWordPress Pinpoint Booking System plugin <= 2.9.9.7.2 - Broken Access Control vulnerabilityCVE-2026-396785.3 Medium
- pinpoint booking system, dotonpaper pinpoint booking system – version 2 +1 morePinpoint Booking System – #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL InjectionCVE-2024-132356.5 Medium
- dotonpaper pinpoint booking systemWordPress Pinpoint Booking System Plugin <= 2.9.9.5.7 - Broken Access Control vulnerabilityCVE-2024-542526.3 Medium
- dotonpaper pinpoint booking systemWordPress Pinpoint Booking System plugin <= 2.9.9.5.2 - SQL Injection vulnerabilityCVE-2024-538158.5 High
- dotonpaper pinpoint booking systemWordPress Pinpoint Booking System plugin <= 2.9.9.5.7 - CSRF to Stored Cross Site Scripting (XSS) vulnerabilityCVE-2024-493045.4 Medium
- pinpoint booking system, dotonpaper pinpoint booking system – version 2 +1 morePinpoint Booking System <= 2.9.9.5.0- Authenticated (Subscriber+) SQL InjectionCVE-2024-71128.8 High
- dotonpaper pinpoint booking system, pinpoint booking system +1 morePinpoint Booking System < 2.9.9.4.8 - Admin+ Stored XSSCVE-2024-36365.4 Medium
- dotonpaper pinpoint booking system, pinpoint booking system +1 moreWordPress Pinpoint Booking System plugin <= 2.9.9.3.4 - Parameter TamperingCVE-2023-385206.5 Medium
- dotonpaper pinpoint booking system, pinpoint booking system +1 moreWordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-452704.3 Medium
- dotonpaper pinpoint booking system, pinpoint booking system +1 moreWordPress Pinpoint Booking System Plugin <= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS)CVE-2023-250625.9 Medium
- dotonpaper pinpoint booking system, pinpoint booking system +1 morePinpoint Booking System < 2.9.9.2.9 - Subscriber+ SQLiCVE-2023-02208.8 High