Skip to content
Dwbooster vulnerabilities
Newest
-
codepeople booking calendar contact form
WordPress Booking Calendar Contact Form 1.0.23 SQL Injection
CVE-2016-20068
8.8 High
-
codepeople appointment booking calendar
WordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS
CVE-2016-20084
5.1 Medium
-
codepeople booking calendar contact form
WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS
CVE-2016-20070
5.1 Medium
-
codepeople booking calendar contact form
WordPress Booking Calendar Contact Form 1.0.23 SQL Injection
CVE-2016-20069
8.8 High
-
codepeople cp polls
WordPress CP Polls 1.0.8 Cross-Site Request Forgery
CVE-2016-20067
5.3 Medium
-
codepeople cp polls
WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting
CVE-2016-20066
5.1 Medium
-
codepeople cp contact form with paypal, dwbooster cp contact form +1 more
CP Contact Form with PayPal <= 1.3.52 - Cross-Site Request Forgery
CVE-2024-13758
6.5 Medium
-
codepeople calculated fields form
Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2023-6446
4.4 Medium
-
codepeople cp blocks
WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-41732
5.4 Medium
-
codepeople corner ad
Corner Ad <= 1.0.56 - Cross-Site Request Forgery
CVE-2022-3427
8.8 High
-
dwbooster appointment hour booking, codepeople appointment hour booking – booking calendar +1 more
Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
CVE-2022-4036
5.3 Medium
-
dwbooster appointment hour booking, codepeople appointment hour booking – booking calendar +1 more
Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form
CVE-2022-4035
7.2 High
-
dwbooster appointment hour booking, codepeople appointment hour booking – booking calendar +1 more
Appointment Hour Booking <= 1.3.72 - CSV Injection
CVE-2022-4034
5.8 Medium
-
dwbooster appointment hour booking, codepeople appointment hour booking (wordpress plugin) +1 more
WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability
CVE-2022-41692
4.3 Medium
-
dwbooster calendar event multi view
Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS
CVE-2022-2846
Public exploit
4.3 Medium
-
dwbooster loading page with loading screen
Loading Page with Loading Screen < 1.0.83 - Admin+ Stored Cross-Site Scripting
CVE-2022-2169
4.8 Medium
-
dwbooster appointment hour booking, unknown appointment hour booking – wordpress booking plugin +1 more
Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting
CVE-2022-1710
4.8 Medium
-
codepeople cp image store with slideshow
CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLi
CVE-2022-1692
EPSS 10.4%
9.8 Critical
-
codepeople cp blocks
CP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting
CVE-2022-0448
Public exploit
4.8 Medium
-
dwbooster appointment hour booking, unknown appointment hour booking – wordpress booking plugin +1 more
Appointment Hour Booking – WordPress Booking Plugin < 1.3.17 - Authenticated Stored XSS
CVE-2021-24712
5.4 Medium
-
dwbooster appointment hour booking, unknown appointment hour booking – wordpress booking plugin +1 more
Appointment Hour Booking < 1.3.16 - Authenticated Stored Cross-Site Scripting
CVE-2021-24673
4.8 Medium
-
dwbooster calendar event multi view
Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS)
CVE-2021-24498
6.1 Medium
-
dwbooster corner ad
The corner-ad plugin before 1.0.8 for WordPress has XSS.
CVE-2017-18579
6.1 Medium
-
dwbooster appointment hour booking
The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as...
CVE-2019-13505
6.1 Medium