Beds24 Online Booking

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Beds24 Online Booking

Information

Software Type Plugin
Software Slug beds24-online-booking (view on wordpress.org)
Software Status Active
Software Author markkinchin
Software Website beds24.com
Software Downloads 106,108
Software Active Installs 2,000
Software Record Last Updated July 21, 2026

7 Vulnerabilities

Submit a Vulnerability
Beds24 Online Booking <= 2.0.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-47489
May 7, 2025
Researcher: Peter Thaleikis
Beds24 Online Booking <= 2.0.28 - Authenticated (Contributor+) Local File Inclusion
8.8
CVE-2025-32155
Apr 4, 2025
Researcher: João Pedro Soares de Alcântara
Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-31851
Apr 1, 2025
Researcher: João Pedro Soares de Alcântara
Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via beds24-link Shortcode
6.4
CVE-2024-10177
Nov 20, 2024
Researcher: Peter Thaleikis
Beds24 Online Booking <= 2.0.25 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-51664
Nov 1, 2024
Researcher: Roby Firnando Yusuf
Beds24 Online Booking <= 2.0.23 - Authenticated(Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-24717
Jan 31, 2024
Researcher: Dhabaleshwar Das
Beds24 Online Booking <= 2.0.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2023-52228
Jan 8, 2024
Researcher: Ngô Thiên An (ancorn_)
Title Status CVE ID CVSS Researchers Date
Beds24 Online Booking <= 2.0.29 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-47489 6.4 Peter Thaleikis May 7, 2025
Beds24 Online Booking <= 2.0.28 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2025-32155 8.8 João Pedro Soares de Alcântara April 4, 2025
Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-31851 6.4 João Pedro Soares de Alcântara April 1, 2025
Beds24 Online Booking <= 2.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via beds24-link Shortcode Patched CVE-2024-10177 6.4 Peter Thaleikis November 20, 2024
Beds24 Online Booking <= 2.0.25 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2024-51664 4.4 Roby Firnando Yusuf November 1, 2024
Beds24 Online Booking <= 2.0.23 - Authenticated(Administrator+) Stored Cross-Site Scripting Patched CVE-2024-24717 4.4 Dhabaleshwar Das January 31, 2024
Beds24 Online Booking <= 2.0.24 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2023-52228 6.4 Ngô Thiên An (ancorn_) January 8, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation