Skip to content

Wpdevelop vulnerabilities

Products

Newest

wpdevelop booking calendar Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action CVE-2026-18496 5.3 MediumOctober 10, 2026
unknown booking calendar Booking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option Disclosure CVE-2026-105195 2.7 LowOctober 8, 2026
unknown booking calendar Booking Calendar < 11.8 - Unauthenticated Booking Information Disclosure and Modification via Predictable Booking Hash CVE-2026-105193 4.8 MediumOctober 8, 2026
wpdevelop booking calendar WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerability CVE-2026-39601 3.7 LowOctober 2, 2026
unknown booking manager Booking Manager < 2.1.21 - Subscriber+ Arbitrary User Plugin Meta Modification via IDOR CVE-2026-91025 4.3 MediumSeptember 23, 2026
unknown booking manager Booking Manager < 2.1.21 - Author+ SQLi via ICS Import Feed UID (sync_gid) CVE-2026-91024 6.8 MediumSeptember 23, 2026
wpdevelop booking calendar Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter CVE-2026-93655 6.1 MediumSeptember 22, 2026
wpdevelop booking calendar Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameter CVE-2026-92561 6.1 MediumSeptember 18, 2026
wpdevelop booking calendar Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter CVE-2026-92619 7.2 HighSeptember 18, 2026
wpdevelop booking calendar WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability CVE-2026-74002 5.3 MediumSeptember 17, 2026
wpdevelop booking calendar WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-59558 7.1 HighJuly 27, 2026
wpdevelop booking manager WordPress Booking Manager plugin <= 2.1.18 - Cross Site Scripting (XSS) vulnerability CVE-2026-42751 6.5 MediumMay 27, 2026
wpdevelop booking calendar WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability CVE-2026-32358 7.6 HighMarch 13, 2026
wpdevelop booking calendar Booking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings Modification CVE-2026-2230 4.3 MediumFebruary 18, 2026
wpdevelop booking calendar Booking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposure CVE-2026-1431 5.3 MediumJanuary 31, 2026
wpdevelop booking calendar Booking Calendar <= 10.14.11 - Missing Authorization to Sensitive Information Exposure CVE-2025-14982 4.3 MediumJanuary 16, 2026
wpdevelop booking calendar Booking Calendar <= 10.14.10 - Unauthenticated Sensitive Information Exposure CVE-2025-14146 5.3 MediumJanuary 9, 2026
wpdevelop booking calendar Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_check CVE-2025-14383 7.5 HighDecember 15, 2025
wpdevelop booking calendar Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcode CVE-2025-12804 6.4 MediumDecember 5, 2025
wpdevelop booking calendar WordPress Booking Calendar plugin <= 10.14.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-64381 6.5 MediumNovember 13, 2025
wpdevelop booking manager WordPress Booking Manager plugin <= 2.1.17 - Cross Site Scripting (XSS) vulnerability CVE-2025-64275 6.5 MediumNovember 13, 2025
unknown booking manager Booking Manager < 2.1.15 - Contributor+ Booking Deletion CVE-2025-10124 4.5 MediumOctober 10, 2025
wpdevelop booking calendar Booking Calendar <= 10.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-9346 6.4 MediumAugust 28, 2025
wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode CVE-2025-4669 6.4 MediumMay 17, 2025
wpbookingcalendar booking calendar WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation CVE-2024-13821 5.3 MediumFebruary 12, 2025
wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode CVE-2024-13323 6.4 MediumJanuary 14, 2025
wpdevelop email reminders WordPress Email Reminders Plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-56292 5.9 MediumJanuary 7, 2025
wpdevelop email reminders Email Reminders <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter CVE-2024-11945 6.4 MediumDecember 10, 2024
unknown wp booking calendar WP Booking Calendar < 10.6.5 - Admin+ Stored XSS CVE-2024-10893 4.8 MediumDecember 3, 2024
unknown wp booking calendar WP Booking Calendar < 10.6.3 - Admin+ Stored XSS CVE-2024-10027 4.8 MediumNovember 7, 2024
wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-9306 4.4 MediumOctober 4, 2024
wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting CVE-2024-8274 6.1 MediumAugust 30, 2024
wpbookingcalendar booking calendar WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode CVE-2024-6930 6.4 MediumJuly 24, 2024
wpdevelop booking calendar WordPress Booking Calendar plugin <= 9.4.3 - SQL Injection CVE-2023-23991 7.6 HighMarch 26, 2024
wpbookingcalendar booking calendar Booking Calendar <= 9.9 - Unauthenticated SQL Injection CVE-2024-1207 9.8 CriticalFebruary 8, 2024
wpbookingcalendar booking calendar, wpdevelop wp booking calendar +1 more WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51520 6.5 MediumFebruary 1, 2024
oplugins booking manager WordPress Booking Manager Plugin <= 2.1.5 is vulnerable to SQL Injection CVE-2023-50840 8.5 HighDecember 28, 2023
unknown booking calendar Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS CVE-2023-4620 6.1 MediumOctober 16, 2023
oplugins booking manager Booking Manager < 2.0.29 - Subscriber+ SSRF CVE-2023-1977 8.8 HighAugust 16, 2023
booking calendar project calendar, wpdevelop booking calendar +1 more Booking Calendar <= 9.1 - PHP Object Injection via Shortcode CVE-2022-1463 8.8 HighMay 10, 2022
booking calendar project calendar, unknown booking calendar +1 more Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting CVE-2021-25040 6.1 MediumJanuary 3, 2022
booking calendar project calendar, wpdevelop booking calendar +1 more Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote... CVE-2017-2151 6.1 MediumApril 28, 2017
booking calendar project calendar, wpdevelop booking calendar +1 more Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote... CVE-2017-2150 5.3 MediumApril 28, 2017