Iqonicdesign Wpbookit vulnerabilities

• iqonicdesign wpbookit pro WordPress WPBookit Pro plugin <= 1.6.18 - Privilege Escalation vulnerability CVE-2026-25414 8.8 HighMarch 25, 2026
• iqonicdesign wpbookit pro WordPress WPBookit Pro plugin <= 1.6.18 - Arbitrary File Upload vulnerability CVE-2026-25413 9.9 CriticalMarch 25, 2026
• iqonicdesign wpbookit WPBookit <= 1.0.8 - Missing Authorization to Unauthenticated Sensitive Customer Data Exposure CVE-2026-1980 5.3 MediumMarch 4, 2026
• iqonicdesign wpbookit WPBookit <= 1.0.8 - Unauthenticated Stored Cross-Site Scripting via 'wpb_user_name' and 'wpb_user_email' Parameters CVE-2026-1945 7.2 HighMarch 4, 2026
• iqonicdesign wpbookit pro WordPress WPBookit Pro plugin <= 1.6.18 - Broken Access Control vulnerability CVE-2026-25415 5.3 MediumFebruary 19, 2026
• iqonicdesign wpbookit WPBookit <= 1.0.7 - Customer Deletion via CSRF CVE-2025-12685 6.5 MediumJanuary 2, 2026
• iqonicdesign wpbookit WPBookit <= 1.0.6 - Unauthenticated Stored Cross-Site Scripting CVE-2025-12135 Public exploit 7.2 HighNovember 21, 2025
• iqonicdesign wpbookit WPBookit <= 1.0.6 - Unauthenticated Arbitrary File Upload via image_upload_handle Function CVE-2025-7852 9.8 CriticalJuly 24, 2025
• iqonic wpbookit WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-6057 8.8 HighJuly 12, 2025
• iqonic wpbookit WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload CVE-2025-6058 Public exploit 9.8 CriticalJuly 12, 2025
• iqonic wpbookit WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Email Update CVE-2025-3811 9.8 CriticalMay 9, 2025
• iqonic wpbookit WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover CVE-2025-3810 9.8 CriticalMay 9, 2025
• iqonic wpbookit WordPress WPBookit plugin <= 1.0.7 - Broken Access Control vulnerability CVE-2025-32254 5.3 MediumApril 4, 2025
• iqonic wpbookit WordPress WPBookit plugin <= 1.0.1 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-26910 7.1 HighMarch 10, 2025
• iqonic wpbookit WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload CVE-2025-0357 9.8 CriticalJanuary 25, 2025
• iqonic wpbookit WPBookit <= 1.6.4 - Unauthenticated Arbitrary User Password Change CVE-2024-10215 9.8 CriticalJanuary 9, 2025
• iqonic wpbookit WordPress WPBookit plugin <= 1.6.0 - SQL Injection vulnerability CVE-2024-54280 9.3 CriticalDecember 16, 2024