VikAppointments Services Booking Calendar vulnerabilities

Product

VikAppointments Services Booking Calendar

by e4jvikwp · last CVE Oct 3, 2026

CVEs

On KEV

9.3

Max CVSS

New 30D

Severity mix

Critical 2High 2Medium 0Low 0

Severity

Exploitation

Watch

Add VikAppointments Services Booking Calendar to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-84768	9.3	0%	Sep 3	WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability Affected: through 1.2.20
CVE-2026-87115	9.1	1%	Oct 3	VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter Affected: through 1.2.21
CVE-2026-15918	7.5	1%	Aug 5	VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection Affected: through 1.2.19
CVE-2025-22719	7.1	0%	Jan 21	WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability Affected: through 1.2.16