Skip to contentCodepeople Booking Calendar Contact Form vulnerabilities
- codepeople booking calendar contact formWordPress Booking Calendar Contact Form 1.0.23 SQL InjectionCVE-2016-200688.8 High
- codepeople booking calendar contact formWordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSSCVE-2016-200705.1 Medium
- codepeople booking calendar contact formWordPress Booking Calendar Contact Form 1.0.23 SQL InjectionCVE-2016-200698.8 High
- codepeople booking calendar contact formBooking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar TakeoverCVE-2026-68105.3 Medium
- codepeople booking calendar contact formBooking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' ParameterCVE-2025-133185.3 Medium
- codepeople booking calendar contact formWordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-482316.5 Medium
- codepeople booking calendar contact formWordPress Booking Calendar Contact Form Plugin <= 1.2.55 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2025-247235.9 Medium
- codepeople booking calendar contact formWordPress Booking Calendar Contact Form plugin <= 1.2.34 - Broken Access Control vulnerabilityCVE-2023-250374.3 Medium
- booking calendar project calendar, codepeople booking calendar contact form +1 moreWordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)CVE-2023-363847.1 High