Skip to contentWpbookingcalendar Booking Calendar vulnerabilities
- wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 moreBooking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc ShortcodeCVE-2025-46696.4 Medium
- wpbookingcalendar booking calendarWP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking ManipulationCVE-2024-138215.3 Medium
- wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 moreBooking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' ShortcodeCVE-2024-133236.4 Medium
- unknown wp booking calendarWP Booking Calendar < 10.6.5 - Admin+ Stored XSSCVE-2024-108934.8 Medium
- unknown wp booking calendarWP Booking Calendar < 10.6.3 - Admin+ Stored XSSCVE-2024-100274.8 Medium
- wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 moreWP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-93064.4 Medium
- wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 moreWP Booking Calendar <= 10.5 - Reflected Cross-Site ScriptingCVE-2024-82746.1 Medium
- wpbookingcalendar booking calendarWP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform ShortcodeCVE-2024-69306.4 Medium
- wpbookingcalendar booking calendarBooking Calendar <= 9.9 - Unauthenticated SQL InjectionCVE-2024-12079.8 Critical
- wpbookingcalendar booking calendar, wpdevelop wp booking calendar +1 moreWordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)CVE-2023-515206.5 Medium
- unknown booking calendarBooking Calendar < 9.7.3.1 - Unauthenticated Stored XSSCVE-2023-46206.1 Medium
- wpbookingcalendar booking calendar, wpdevelop/oplugins booking calendar (wordpress plugin) +1 moreWordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulityCVE-2022-331775.4 Medium