Course Booking Platform

Course Booking Platform has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Course Booking Platform has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Peter Thaleikis. Course Booking Platform is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.0.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Course Booking Platform vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-58887

Course Booking Platform <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Course Booking Platform banner
Latestv1.0.0
0.0(0)
0/100
Last Updated
2026-08-13 (1mo ago)
Active Installs
10+
Downloads
1,436
Requires WP
5.7.0+
Requires PHP
5.2.4+
Tested up to
WP 7.1.0
Created
2023-04-02 (4y ago)

Course Finder is an online booking system for courses, seminar, events and appointments. This plugin allows you to integrate the Course Booking System (Course Finder) into your wordpress site. Hence, you can setup one time or recurring courses that your participants can easily book through the web form that is automatically generated and embedded into you page or post using the short code. Your customers can then book and pay for the courses at any time. It takes only five minutes to setup, and your participants/clients an immediately start booking your courses: 1) Sign-up/create an account or login into Course Finder. 2) Create a course or appointment type with description etc. 3) Add sessions to the course, i.e., when and where the course will take place. For appointments, simply define your availability. 4) Use the generated short code to embed the auto generated form in any page or post of your wordpress site. Your customers can now book the courses conveniently through your webpage.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C