Skip to contentWpdevart Booking Calendar, Appointment Booking System vulnerabilities
- unknown booking calendar, appointment booking systemBooking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File UploadCVE-2026-143348.8 High
- wpdevart booking calendar, appointment booking systemWordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-733956.5 Medium
- wpdevart booking calendar, appointment booking systemBooking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX ActionCVE-2026-88405.3 Medium
- wpdevart booking calendar, appointment booking systemWordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerabilityCVE-2026-577785.3 Medium
- wpdevart booking calendar, appointment booking systemBooking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'CVE-2026-152895.9 Medium
- wpdevart booking calendar, appointment booking systemWordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-254357.1 High
- wpdevart booking calendar, appointment booking systemWordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerabilityCVE-2025-675745.3 Medium
- wpdevart booking calendar pro wpdevart, booking calendar, appointment booking system +1 moreBooking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'CVE-2024-120776.1 Medium
- wpdevart booking calendar, booking calendar, appointment booking system +1 moreBooking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL InjectionCVE-2024-108566.5 Medium
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreWordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerabilityCVE-2023-244075.0 Medium
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreBooking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadCVE-2024-95047.2 High
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreWordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerabilityCVE-2023-243733.7 Low
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreWordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL InjectionCVE-2022-474286.7 Medium
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreWordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)CVE-2022-474385.9 Medium
- wpdevart booking calendar, appointment booking system, booking calendar +1 moreWordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-243885.4 Medium
- unknown booking calendar, appointment booking system, wpdevart booking calendar +1 moreBooking Calendar < 3.2.2 - Unauthenticated Arbitrary File UploadCVE-2022-39829.8 Critical