Login Request a demo
BC
Product
Booking Calendar
by Wpdevart · last CVE Dec 24, 2024
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 3Medium 3Low 0
Severity
All severities9Critical3High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Booking Calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-24373
9.8
0%
Jun 3
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability
Affected: before 3.2.4
CVE-2022-47428
9.8
1%
Nov 6
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection
Affected: before 3.2.8
CVE-2022-3982
9.8
5%
Dec 12
Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload
Affected: before 3.2.2
CVE-2023-24407
8.8
1%
Dec 9
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerability
Affected: before 3.2.4
CVE-2018-10363
7.5
1%
Jun 13
An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress
Affected: 2.2.2
CVE-2024-9504
7.2
0%
Nov 26
Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Affected: through 3.2.15
CVE-2024-10856
6.5
0%
Dec 24
Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection
Affected: before 3.2.0
CVE-2022-47438
5.4
0%
Mar 29
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)
Affected: through 3.2.3
CVE-2023-24388
5.4
0%
Feb 17
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: before 3.2.4
Showing 9