All products
booking-calendar
WordPress · Plugin23 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Insecure Direct Object ReferenceCVE-2026-73395 |
booking-calendar |
WordPress |
Medium
|
No fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-14334 |
booking-calendar |
WordPress |
High
|
No fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX ActionCVE-2026-8840 |
booking-calendar |
WordPress |
Medium
|
No fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'CVE-2026-15289 |
booking-calendar |
WordPress |
Medium
|
Fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.36 - Missing AuthorizationCVE-2026-57778 |
booking-calendar |
WordPress |
Medium
|
No fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-25435 |
booking-calendar |
WordPress |
High
|
No fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.30 - Missing AuthorizationCVE-2025-67574 |
booking-calendar |
WordPress |
Medium
|
Fix reported |
|
| Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'CVE-2024-12077 |
booking-calendar-probooking-calendar |
WordPress |
Medium
|
Fix reported |
|
| Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL InjectionCVE-2024-10856 |
booking-calendar |
WordPress |
Medium
|
Fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.3 - Missing AuthorizationCVE-2023-24407 |
booking-calendar |
WordPress |
Medium
|
Fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadCVE-2024-9504 |
booking-calendar |
WordPress |
High
|
Fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.3 - Unauthenticated Bypass VulnerabilityCVE-2023-24373 |
booking-calendar |
WordPress |
Medium
|
Fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.3 - Cross-Site Request ForgeryCVE-2023-24388 |
booking-calendar |
WordPress |
Medium
|
Fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.3 - Authenticated (Editor+) Stored Cross-Site ScriptingCVE-2022-47438 |
booking-calendar |
WordPress |
Medium
|
Fix reported |
|
| Booking calendar, Appointment Booking System <= 2.1.7 - Cross-Site Request ForgeryCVE-2018-5673 |
booking-calendar |
WordPress |
High
|
Fix reported |
|
| Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection |
booking-calendar |
WordPress |
High
|
Fix reported |
|
| Booking calendar, Appointment Booking System < 2.2.3 - Unauthenticated Parameter ManipulationCVE-2018-10363 |
booking-calendar |
WordPress |
High
|
Fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.8 - Multiple Authenticated(Editor+) SQL Injection |
booking-calendar |
WordPress |
High
|
Fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.1 - Unauthenticated Arbitrary File UploadCVE-2022-3982 |
booking-calendar |
WordPress |
Critical
|
Fix reported |
|
| Booking calendar, Appointment Booking System <= 3.2.6 - Authenticated (Administrator+) SQL Injection via *_selectedCVE-2022-47428 |
booking-calendar |
WordPress |
High
|
Fix reported |
|
