Wpbookingcalendar vulnerabilities

Products

• Booking Calendar 6
• Wp Booking Calendar 6

Newest

• wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode CVE-2025-4669 6.4 MediumMay 17, 2025
• unknown secure downloads Secure Downloads < 1.2.3 - Admin+ Arbitrary File Download CVE-2024-8031 6.5 MediumMay 15, 2025
• wpbookingcalendar booking calendar WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation CVE-2024-13821 5.3 MediumFebruary 12, 2025
• wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode CVE-2024-13323 6.4 MediumJanuary 14, 2025
• unknown wp booking calendar WP Booking Calendar < 10.6.5 - Admin+ Stored XSS CVE-2024-10893 4.8 MediumDecember 3, 2024
• unknown wp booking calendar WP Booking Calendar < 10.6.3 - Admin+ Stored XSS CVE-2024-10027 4.8 MediumNovember 7, 2024
• wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-9306 4.4 MediumOctober 4, 2024
• wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting CVE-2024-8274 6.1 MediumAugust 30, 2024
• wpbookingcalendar booking calendar WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode CVE-2024-6930 6.4 MediumJuly 24, 2024
• wpbookingcalendar booking calendar Booking Calendar <= 9.9 - Unauthenticated SQL Injection CVE-2024-1207 9.8 CriticalFebruary 8, 2024
• wpbookingcalendar booking calendar, wpdevelop wp booking calendar +1 more WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51520 6.5 MediumFebruary 1, 2024
• unknown booking calendar Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS CVE-2023-4620 6.1 MediumOctober 16, 2023
• wpbookingcalendar booking calendar, wpdevelop/oplugins booking calendar (wordpress plugin) +1 more WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity CVE-2022-33177 5.4 MediumSeptember 6, 2022