BC
Product
Booking Calendar Contact Form
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 7Low 0
Watch
Add Booking Calendar Contact Form to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-48231 | 6.5 | Jul 4 | WordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) Vulnerability Affected: through 1.2.58 |
| CVE-2023-36384 | 6.1 | Jul 18 | WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS) Affected: through 1.2.40 |
| CVE-2016-10908 | 6.1 | Aug 21 | The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS Affected: before 1.0.24 |
| CVE-2025-24723 | 5.9 | Jan 24 | WordPress Booking Calendar Contact Form Plugin <= 1.2.55 - Stored Cross Site Scripting (XSS) vulnerability Affected: through 1.2.55 |
| CVE-2026-6810 | 5.3 | Apr 24 | Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover Affected: through 1.2.63 |
| CVE-2025-13318 | 5.3 | Nov 22 | Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter Affected: through 1.2.60 |
| CVE-2023-25037 | 4.3 | Dec 9 | WordPress Booking Calendar Contact Form plugin <= 1.2.34 - Broken Access Control vulnerability Affected: through 1.2.34 |
Showing 7