CVE-2022-0739: Reputeinfosystems Bookingpress

Critical severity, CVSS 9.8. EPSS: 37.2% chance of exploitation in the next 30 days.

The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

Affected products

• Reputeinfosystems Bookingpress: before 1.0.11 (fixed in 1.0.11)

Published 2022-03-21. Last modified 2026-06-17.