Skip to content
PluginCanary

BA Book Everything

by bookingalgorithms · 10,000+ active installs · Checked 3 Nov 2026
Healthy3 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 1.8.34.

81/ 100 Canary Score
Sub-scores for BA Book Everything
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 1.8.34. Update to version 1.8.34 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 1.8.29. Update to version 1.8.29 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 24 Sep 2026, fixed in 1.8.28. Update to version 1.8.28 or later.24 Sep 2026Evidence
  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
bookingalgorithms11 Jan 2018 to 28 Oct 2026, 504 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
7 days ago
Releases, 24 months
50
Tested up to
7.1 current
Requires PHP
8.1 supported 8.2+
Releases per quarter for BA Book Everything
Q1 20245
Q2 20248
Q3 202411
Q4 202477
Q1 20258
Q2 20258
Q3 20253
Q4 20256
Q1 20264
Q2 20265
Q3 20264
Q4 20265

Last release 28 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026BA Book Everything <= 1.8.33 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.8.331.8.340
1 Oct 2026BA Book Everything <= 1.8.28 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter7.2<= 1.8.281.8.290
24 Sep 2026BA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter7.2<= 1.8.271.8.280
8 Jan 2026BA Book Everything <= 1.8.16 - Missing Authorization4.3<= 1.8.161.8.171
18 Dec 2025BA Book Everything <= 1.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode6.4<= 1.8.141.8.150
30 Sep 2024BA Book Everything <= 1.6.20 - Reflected Cross-Site Scripting6.1<= 1.6.201.6.210
23 Sep 2024BA Book Everything <= 1.6.20 - Unauthenticated Arbitrary User Password Reset5.3<= 1.6.201.6.210
23 Sep 2024BA Book Everything <= 1.6.20 - Cross-Site Request Forgery to Email Address Update/Account Takeover8.8<= 1.6.201.6.210
16 Apr 2024BA Book Everything <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.6.81.6.90
15 Apr 2024BA Book Everything <= 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 1.6.81.6.91
12 Apr 2024BA Book Everything <= 1.6.4 - Authenticated (Contributor+) SQL Injection9.9<= 1.6.41.6.50
30 Sep 2020BA Book Everything Plugin < 1.3.25 - Cross-Site Scripting and Cross-Frame Scripting6.1< 1.3.251.3.251471

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for BA Book Everything
Q4 20231.0
Q1 20241.0
Q2 20243.0
Q3 20245.0
Q3 20251.0
Q4 20255.0

Average rating rose from 1.0 to 5.0 between Q4 2023 and Q4 2025.

Rating distribution
5 star16
4 star0
3 star0
2 star0
1 star4
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for BA Book Everything
4 May 2026353
11 May 2026564
18 May 20263,044
25 May 2026887
1 Jun 2026751
8 Jun 2026606
15 Jun 2026508
22 Jun 2026467
29 Jun 20262,936
6 Jul 2026978
13 Jul 20263,262
20 Jul 2026780
27 Jul 2026629
3 Aug 2026521
10 Aug 20263,300
17 Aug 2026830
24 Aug 2026602
31 Aug 2026530
7 Sep 2026521
14 Sep 2026525
21 Sep 20263,496
28 Sep 20263,918
5 Oct 20261,246
12 Oct 20264,693
19 Oct 20264,679
26 Oct 20263,865
2 Nov 2026233

Weekly downloads over the last 4 weeks are 103% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SimplyBook.me - Booking and reservations calendarScore 91 · 30,000+MotoPress Hotel Booking for ElementorScore 91 · 10,000+MotoPress Hotel Booking Styles & TemplatesScore 91 · 10,000+SetmoreScore 91 · 4,000+Zenchef widget integrationScore 91 · 2,000+

Facts

Version1.8.34
Authorbookingalgorithms
Added11 Jan 2018
Last updated28 Oct 2026
Active installs10,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP8.1
CategoryBookings & Scheduling > Appointment Scheduling
TagsTours, Rental, yachts, booking, properties

Questions

Is BA Book Everything still maintained?

BA Book Everything was last updated on 28 Oct 2026. Its Canary status is Healthy.

Is BA Book Everything safe?

BA Book Everything has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns BA Book Everything?

The wordpress.org author is bookingalgorithms. Recent committers: bookingalgorithms, plugin-master. We have recorded no ownership change.

What can I use instead of BA Book Everything?

Plugins in the same category with a higher Canary Score: SimplyBook.me - Booking and reservations calendar, MotoPress Hotel Booking for Elementor, MotoPress Hotel Booking Styles & Templates, Setmore, Zenchef widget integration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue