CVE-2025-31910

WordPress BookingPress plugin <= 1.1.28 - SQL Injection vulnerability

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems BookingPress bookingpress-appointment-booking allows SQL Injection.This issue affects BookingPress: from n/a through <= 1.1.28.

INFO

Published Date :

2025-04-01T14:52:25.743Z

Last Modified :

2026-04-01T15:50:00.872Z

Source :

Patchstack

AFFECTED PRODUCTS

The following products are affected by CVE-2025-31910 vulnerability.

Vendors	Products
Reputeinfosystems	Bookingpress
Wordpress	Wordpress

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-31910.

URL	Resource
https://patchstack.com/database/Wordpress/Plugin/bookingpress-appointment-booking/vulnerability/wordpress-bookingpress-plugin-1-1-28-sql-injection-vulnerability?_s_id=cve