Wpdevelop Booking Calendar vulnerabilities

• wpdevelop booking calendar Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action CVE-2026-18496 5.3 MediumOctober 10, 2026
• unknown booking calendar Booking Calendar 10.15 - 11.8.2 - Editor+ Arbitrary Option Disclosure CVE-2026-105195 2.7 LowOctober 8, 2026
• unknown booking calendar Booking Calendar < 11.8 - Unauthenticated Booking Information Disclosure and Modification via Predictable Booking Hash CVE-2026-105193 4.8 MediumOctober 8, 2026
• wpdevelop booking calendar WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerability CVE-2026-39601 3.7 LowOctober 2, 2026
• wpdevelop booking calendar Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter CVE-2026-93655 6.1 MediumSeptember 22, 2026
• wpdevelop booking calendar Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameter CVE-2026-92561 6.1 MediumSeptember 18, 2026
• wpdevelop booking calendar Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter CVE-2026-92619 7.2 HighSeptember 18, 2026
• wpdevelop booking calendar WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability CVE-2026-74002 5.3 MediumSeptember 17, 2026
• wpdevelop booking calendar WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-59558 7.1 HighJuly 27, 2026
• wpdevelop booking calendar WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability CVE-2026-32358 7.6 HighMarch 13, 2026
• wpdevelop booking calendar Booking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings Modification CVE-2026-2230 4.3 MediumFebruary 18, 2026
• wpdevelop booking calendar Booking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposure CVE-2026-1431 5.3 MediumJanuary 31, 2026
• wpdevelop booking calendar Booking Calendar <= 10.14.11 - Missing Authorization to Sensitive Information Exposure CVE-2025-14982 4.3 MediumJanuary 16, 2026
• wpdevelop booking calendar Booking Calendar <= 10.14.10 - Unauthenticated Sensitive Information Exposure CVE-2025-14146 5.3 MediumJanuary 9, 2026
• wpdevelop booking calendar Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_check CVE-2025-14383 7.5 HighDecember 15, 2025
• wpdevelop booking calendar Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcode CVE-2025-12804 6.4 MediumDecember 5, 2025
• wpdevelop booking calendar WordPress Booking Calendar plugin <= 10.14.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-64381 6.5 MediumNovember 13, 2025
• wpdevelop booking calendar Booking Calendar <= 10.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-9346 6.4 MediumAugust 28, 2025
• wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode CVE-2025-4669 6.4 MediumMay 17, 2025
• wpbookingcalendar booking calendar WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation CVE-2024-13821 5.3 MediumFebruary 12, 2025
• wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode CVE-2024-13323 6.4 MediumJanuary 14, 2025
• unknown wp booking calendar WP Booking Calendar < 10.6.5 - Admin+ Stored XSS CVE-2024-10893 4.8 MediumDecember 3, 2024
• unknown wp booking calendar WP Booking Calendar < 10.6.3 - Admin+ Stored XSS CVE-2024-10027 4.8 MediumNovember 7, 2024
• wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-9306 4.4 MediumOctober 4, 2024
• wpbookingcalendar wp booking calendar, wpdevelop booking calendar +1 more WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting CVE-2024-8274 6.1 MediumAugust 30, 2024
• wpbookingcalendar booking calendar WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode CVE-2024-6930 6.4 MediumJuly 24, 2024
• wpdevelop booking calendar WordPress Booking Calendar plugin <= 9.4.3 - SQL Injection CVE-2023-23991 7.6 HighMarch 26, 2024
• wpbookingcalendar booking calendar Booking Calendar <= 9.9 - Unauthenticated SQL Injection CVE-2024-1207 9.8 CriticalFebruary 8, 2024
• wpbookingcalendar booking calendar, wpdevelop wp booking calendar +1 more WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-51520 6.5 MediumFebruary 1, 2024
• unknown booking calendar Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS CVE-2023-4620 6.1 MediumOctober 16, 2023
• booking calendar project calendar, wpdevelop booking calendar +1 more Booking Calendar <= 9.1 - PHP Object Injection via Shortcode CVE-2022-1463 8.8 HighMay 10, 2022
• booking calendar project calendar, unknown booking calendar +1 more Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting CVE-2021-25040 6.1 MediumJanuary 3, 2022
• booking calendar project calendar, wpdevelop booking calendar +1 more Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote... CVE-2017-2151 6.1 MediumApril 28, 2017
• booking calendar project calendar, wpdevelop booking calendar +1 more Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote... CVE-2017-2150 5.3 MediumApril 28, 2017