Login Request a demo
BC
Product
Booking Calendar
by Booking Calendar Project · last CVE Jul 18, 2023
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 3Medium 7Low 0
Severity
All severities10Critical0High3Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Booking Calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-1463
8.8
2%
May 10
Booking Calendar <= 9.1 - PHP Object Injection via Shortcode
Affected: through 9.1
CVE-2018-20556
8.8
19%
Mar 18
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter
Affected: 8.4.3
CVE-2018-5673
8.8
1%
Jan 13
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress
Affected: 2.1.7
CVE-2023-36384
6.1
0%
Jul 18
WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)
Affected: through 1.2.40
CVE-2021-25040
6.1
1%
Jan 3
Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting
Affected: before 8.9.2
CVE-2017-2151
6.1
1%
Apr 28
Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: through 7.1
CVE-2017-2150
5.3
2%
Apr 28
Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote attackers to read arbitrary files via specially crafted captcha_chalange parameter
Affected: through 7.0
CVE-2018-5672
4.8
1%
Jan 13
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress
Affected: 2.1.7
CVE-2018-5671
4.8
1%
Jan 13
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress
Affected: 2.1.7
CVE-2018-5670
4.8
1%
Jan 13
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress
Affected: 2.1.7
Showing 10