Medium 4.3
2026-01-22< 1.8.17
CVE-2026-24371
Minimum safe version
1.8.17
Update to 1.8.17 or later to address 12 fixable vulnerabilities
CVE-2026-24371
CVE-2025-14449
CVE-2024-47360
CVE-2024-8795
CVE-2024-8794
CVE-2024-32598
CVE-2024-32576
CVE-2024-3672
CVE-2024-32125
BA Book Everything Plugin < 1.3.25 - Cross-Site Scripting and Cross-Frame Scripting
BA Book Everything < 1.3.25 - Unauthenticated Reflected XSS & XFS
WordPress BA Book Everything plugin <= 1.3.24 - Unauthenticated Reflected Cross-Site Scripting (XSS) and Cross-Frame Scripting (XFS) vulnerabilities