Skip to content
PluginCanary

Pinpoint Booking System

Pinpoint Booking System - Legacy version
by Pinpoint World · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 27 Oct 2026, 23 releases in 24 months, no unpatched vulnerabilities.

84/ 100 Canary Score
Sub-scores for Pinpoint Booking System
Ownership100
Maintenance100
Security55
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Pinpoint Booking System still maintained?
Yes. Last release 27 Oct 2026, 23 releases in the last 24 months. 27 Oct 2026 · wordpress.org
Who owns Pinpoint Booking System, and has it changed hands?
Changed. New committer pinpointworld made a first commit on 27 Oct 2026. 27 Oct 2026 · SVN log
Was Pinpoint Booking System removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Pinpoint Booking System safe?
17 known vulnerabilities, all fixed (latest in 2.9.9.7.0). Not on the exploited list. 14 Aug 2026 · Wordfence Intelligence
Is the latest Pinpoint Booking System update safe to install?
No ownership change before 2.9.9.7.4. No one-star spike after it. 17 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mariuscristian29 Mar 2016 to 22 Oct 2026, 262 commits
pinpointworld27 Oct 2026 to 27 Oct 2026, 2 commits

New committer pinpointworld made a first commit on 27 Oct 2026.

Maintenance

Last release
8 days ago
Releases, 24 months
23
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Pinpoint Booking System
Q1 20242
Q2 20242
Q3 20244
Q4 20241
Q1 20252
Q2 20252
Q3 20252
Q4 20254
Q1 20264
Q2 20264
Q3 20262
Q4 20263

Last release 27 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.6.

Rating distribution
5 star103
4 star11
3 star12
2 star11
1 star48

Security record

7 vulnerabilities in 24 months (17 on record), all patched (latest fixed in 2.9.9.7.0).

Show 17 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
14 Aug 2026Pinpoint Booking System <= 2.9.9.6.9 - Unauthenticated Improper Input Validation to Price Manipulation via 'cart_data' Parameter5.3<= 2.9.9.6.92.9.9.7.0Patched before disclosure
6 Aug 2026Pinpoint Booking System <= 2.9.9.7.1 - Missing Authorization to Unauthenticated Arbitrary Booking Price Manipulation5.3<= 2.9.9.7.1Not affectedn/a
31 Jul 2026Pinpoint Booking System <= 2.9.9.6.9 - Authenticated (Administrator+) SQL Injection via 'field' Parameter4.9<= 2.9.9.6.92.9.9.7.01
20 Feb 2026Pinpoint Booking System <= 2.9.9.6.5 - Missing Authorization5.3<= 2.9.9.6.5Not affectedn/a
20 Feb 2025Pinpoint Booking System - #1 WordPress Booking Plugin <= 2.9.9.5.4 - Authenticated (Subscriber+) SQL Injection6.5<= 2.9.9.5.42.9.9.6.0306
5 Dec 2024Pinpoint Booking System - #1 WordPress Booking Plugin <= 2.9.9.5.7 - Missing Authorization6.3<= 2.9.9.5.72.9.9.5.8306
2 Dec 2024Pinpoint Booking System <= 2.9.9.5.1 - Authenticated (Subscriber+) SQL Injection6.5<= 2.9.9.5.12.9.9.5.280
15 Oct 2024Pinpoint Booking System <= 2.9.9.5.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1<= 2.9.9.5.72.9.9.5.8357
6 Sep 2024Pinpoint Booking System <= 2.9.9.5.0- Authenticated (Subscriber+) SQL Injection8.8<= 2.9.9.5.02.9.9.5.158
15 Jul 2024Pinpoint Booking System <= 2.9.9.4.7 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.9.9.4.72.9.9.4.82
6 Oct 2023Pinpoint Booking System <= 2.9.9.4.0 - Cross-Site Request Forgery via initBackEndAJAX5.4<= 2.9.9.4.02.9.9.4.150
20 Jul 2023Pinpoint Booking System <= 2.9.9.3.4 - Content Spoofing5.3<= 2.9.9.3.42.9.9.3.516
2 Feb 2023Pinpoint Booking System <= 2.9.9.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting4.4< 2.9.9.2.92.9.9.2.9Patched before disclosure
23 Jan 2023Pinpoint Booking System <= 2.9.9.2.8 - Authenticated (Subscriber+) SQL Injection8.8<= 2.9.9.2.82.9.9.2.9Patched before disclosure
7 Jul 2015Pinpoint Booking System - #1 WordPress Booking Plugin < 2.1 - Authenticated SQL Injection8.8< 2.12.165
21 May 2014Pinpoint Booking System - #1 WordPress Booking Plugin < 1.3 - SQL Injection8.8< 1.31.3205
4 Jul 2013Pinpoint Booking System - #1 WordPress Booking Plugin <= 1.3.1 - Reflected Cross-Site Scripting6.1<= 1.3.11.4526

Changelog mentions of security fixes: 2.9.9.7.0 (security); 2.9.9.7.2 (security); 2.9.9.7.4 (sanitize).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

67% of 3 support threads resolved in the last 2 months.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Pinpoint Booking System
4 May 20261,535
11 May 20261,945
18 May 2026690
25 May 2026551
1 Jun 2026429
8 Jun 2026423
15 Jun 20261,587
22 Jun 2026494
29 Jun 2026426
6 Jul 2026485
13 Jul 2026353
20 Jul 2026375
27 Jul 2026215
3 Aug 202646
10 Aug 202661
17 Aug 202661
24 Aug 202656
31 Aug 202672
7 Sep 202613
14 Sep 202623
21 Sep 202641
28 Sep 2026162
5 Oct 20261,438
12 Oct 20262,871
19 Oct 2026897
26 Oct 2026839
2 Nov 2026163

Weekly downloads over the last 4 weeks are 98% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

SimplyBook.meScore 100 · 30,000+MotoPress Hotel Booking StylesScore 100 · 10,000+MotoPress Hotel Booking for ElementorScore 100 · 10,000+EMCScore 93 · 10,000+WP Simple Booking CalendarScore 93 · 10,000+

Facts

Version2.9.9.7.4
AuthorPinpoint World
Added2 Aug 2013
Last updated27 Oct 2026
Active installs2,000+
Requires WordPress6.3
Tested up to7.1.4
Requires PHPnot stated
CategoryBookings & Scheduling > Appointment Scheduling
Tagsappointments, reservations, booking system, booking calendar, availability calendar

Questions

Is Pinpoint Booking System still maintained?

Yes. Last release 27 Oct 2026, 23 releases in the last 24 months.

Who owns Pinpoint Booking System, and has it changed hands?

Changed. New committer pinpointworld made a first commit on 27 Oct 2026.

Was Pinpoint Booking System removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Pinpoint Booking System safe?

17 known vulnerabilities, all fixed (latest in 2.9.9.7.0). Not on the exploited list.

Is the latest Pinpoint Booking System update safe to install?

No ownership change before 2.9.9.7.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue