Skip to contentUnknown Booking Calendar vulnerabilities
- unknown booking calendarBooking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option DisclosureCVE-2026-1051952.7 Low
- unknown booking calendarBooking Calendar < 11.8 - Unauthenticated Booking Information Disclosure and Modification via Predictable Booking HashCVE-2026-1051934.8 Medium
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking < 1.2.4 - Hydra Host+ Cross-Host Account Modification and Deletion via IDORCVE-2026-924255.5 Medium
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking 1.1.0 - < 1.2.3 - Hydra Host+ Host Profile Takeover via IDORCVE-2026-924214.7 Medium
- themefic hydra booking — appointment scheduling & booking calendarHydra Booking < 1.2.2 - Hydra Host+ Cross-Host Booking Deletion and Modification via IDORCVE-2026-924203.8 Low
- unknown appointment booking calendar plugin and scheduling pluginBookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation via PayPal Payment ConfirmationCVE-2026-765867.5 High
- unknown booking calendar, appointment booking systemBooking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File UploadCVE-2026-143348.8 High
- unknown appointment booking calendar plugin and scheduling pluginBookingPress <= 1.1.28 - Unauthenticated PHP Object InjectionCVE-2026-123788.1 High
- codepeople appointment booking calendar, unknown appointment booking calendar plugin and scheduling plugin +1 moreBookingPress < 1.1.23 - Unauthenticated Export File DownloadCVE-2024-122747.5 High
- unknown wp booking calendarWP Booking Calendar < 10.6.5 - Admin+ Stored XSSCVE-2024-108934.8 Medium
- unknown wp booking calendarWP Booking Calendar < 10.6.3 - Admin+ Stored XSSCVE-2024-100274.8 Medium
- croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments, nsquared appointment booking calendar +2 moreAppointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSSCVE-2024-78774.8 Medium
- croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments, nsquared appointment booking calendar +2 moreAppointment Booking Calendar < 1.6.7.55 - Admin+ Stored XSSCVE-2024-78764.8 Medium
- nsquared appointment booking calendar, croixhaug appointment booking calendar — simply schedule appointments booking plugin, nsqua simply schedule appointments +2 moreAppointment Booking Calendar < 1.6.7.43 - Admin+ Template Injection to RCECVE-2024-71297.2 High
- codepeople appointment booking calendarBooking Calendar < 1.3.83 - CSRF appointment schedulingCVE-2024-08568.8 High
- unknown booking calendarBooking Calendar < 9.7.3.1 - Unauthenticated Stored XSSCVE-2023-46206.1 Medium
- unknown booking calendar, appointment booking system, wpdevart booking calendar +1 moreBooking Calendar < 3.2.2 - Unauthenticated Arbitrary File UploadCVE-2022-39829.8 Critical
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.7.1 - Reflected Cross-Site ScriptingCVE-2022-10076.1 Medium
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.7.1 - Admin+ SQLiCVE-2022-10067.2 High
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.49 - Customer+ Arbitrary Appointments Status UpdateCVE-2022-08255.4 Medium
- saasproject booking package, unknown booking package – appointment booking calendar system +1 moreBooking Package < 1.5.29 - Unauthenticated Sensitive Data DisclosureCVE-2022-07097.5 High
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data DisclosureCVE-2022-07205.4 Medium
- reputeinfosystems bookingpress, unknown bookingpress – appointments booking calendar plugin and online scheduling plugin +1 moreBookingPress < 1.0.11 - Unauthenticated SQL InjectionCVE-2022-0739Public exploitEPSS 37.4%9.8 Critical
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.7.0 - Unauthenticated SQL InjectionCVE-2022-06949.8 Critical
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.46 - Manager+ RCECVE-2022-06878.8 High
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.46 - Reflected Cross-Site ScriptingCVE-2022-06276.1 Medium
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.46 - Arbitrary Customer Deletion via CSRFCVE-2022-06164.3 Medium
- unknown wp booking system – booking calendar, wpbookingsystem wp booking system +1 moreWP Booking System – Booking Calendar < 2.0.15 - Authenticated Reflected Cross-Site Scripting (XSS)CVE-2021-250615.4 Medium
- booking calendar project calendar, unknown booking calendar +1 moreBooking Calendar < 8.9.2 - Reflected Cross-Site ScriptingCVE-2021-250406.1 Medium
- roland murg wp simple booking calendarWP Simple Booking Calendar <= 2.0.6 (before 07/12/2021) - Authenticated SQL InjectionCVE-2021-247268.8 High
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.6.8 - Authenticated Reflected Cross-Site Scripting (XSS)CVE-2021-242325.4 Medium
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.6.7 - Authenticated Reflected Cross-Site Scripting (XSS)CVE-2021-242255.4 Medium