DW
Vendor
Dwbooster
24
CVEs
0
On KEV
0
New 30D
Products
AH8.8
Appointment Hour Booking
Dwbooster
8 CVEs0 on KEV0 new
BC8.2
Booking Calendar Contact Form
dwbooster
3 CVEs0 on KEV0 new
CE6.1
Calendar Event Multi View
Dwbooster
2 CVEs0 on KEV0 new
CA6.5
Corner AD
Dwbooster
2 CVEs0 on KEV0 new
CB8.8
CP Blocks
Dwbooster
2 CVEs0 on KEV0 new
CP7.2
CP Polls
dwbooster
2 CVEs0 on KEV0 new
AB7.2
Appointment Booking Calendar
dwbooster
1 CVEs0 on KEV0 new
CF4.8
Calculated Fields Form
Dwbooster
1 CVEs0 on KEV0 new
CC6.5
CP Contact Form
Dwbooster
1 CVEs0 on KEV0 new
CI9.8
CP Image Store With Slideshow
Dwbooster
1 CVEs0 on KEV0 new
LP4.8
Loading Page With Loading Screen
Dwbooster
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2016-20068 | BC Booking Calendar Contact Form dwbooster | 8.2 | Jun 15 | WordPress Booking Calendar Contact Form 1.0.23 SQL Injection |
| CVE-2016-20084 | AB Appointment Booking Calendar dwbooster | 7.2 | Jun 15 | WordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS |
| CVE-2016-20070 | BC Booking Calendar Contact Form dwbooster | 6.4 | Jun 15 | WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS |
| CVE-2016-20069 | BC Booking Calendar Contact Form dwbooster | 8.2 | Jun 15 | WordPress Booking Calendar Contact Form 1.0.23 SQL Injection |
| CVE-2016-20067 | CP CP Polls dwbooster | 4.3 | Jun 15 | WordPress CP Polls 1.0.8 Cross-Site Request Forgery |
| CVE-2016-20066 | CP CP Polls dwbooster | 7.2 | Jun 15 | WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting |
| CVE-2024-13758 | CC CP Contact Form Dwbooster | 6.5 | Jan 30 | CP Contact Form with PayPal <= 1.3.52 - Cross-Site Request Forgery |
| CVE-2023-6446 | CF Calculated Fields Form Dwbooster | 4.8 | Jan 11 | Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2023-41732 | CB CP Blocks Dwbooster | 8.8 | Oct 6 | WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2022-3427 | CA Corner AD Dwbooster | 6.5 | Dec 15 | Corner Ad <= 1.0.56 - Cross-Site Request Forgery |
| CVE-2022-4036 | AH Appointment Hour Booking Dwbooster | 5.3 | Nov 29 | Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass |
| CVE-2022-4035 | AH Appointment Hour Booking Dwbooster | 6.1 | Nov 29 | Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form |
| CVE-2022-4034 | AH Appointment Hour Booking Dwbooster | 7.8 | Nov 29 | Appointment Hour Booking <= 1.3.72 - CSV Injection |
| CVE-2022-41692 | AH Appointment Hour Booking Dwbooster | 8.8 | Nov 18 | WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability |
| CVE-2022-2846 | CE Calendar Event Multi View Dwbooster | 4.3 | Aug 16 | Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS |
| CVE-2022-2169 | LP Loading Page With Loading Screen Dwbooster | 4.8 | Jul 17 | Loading Page with Loading Screen < 1.0.83 - Admin+ Stored Cross-Site Scripting |
| CVE-2022-1710 | AH Appointment Hour Booking Dwbooster | 4.8 | Jun 13 | Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting |
| CVE-2022-1692 | CI CP Image Store With Slideshow Dwbooster | 9.8 | Jun 6 | CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLi |
| CVE-2022-0448 | CB CP Blocks Dwbooster | 4.8 | Mar 7 | CP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting |
| CVE-2021-24712 | AH Appointment Hour Booking Dwbooster | 5.4 | Oct 11 | The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars |
| CVE-2021-24673 | AH Appointment Hour Booking Dwbooster | 4.8 | Oct 4 | The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site… |
| CVE-2021-24498 | CE Calendar Event Multi View Dwbooster | 6.1 | Aug 2 | The Calendar Event Multi View WordPress plugin before 1.4.01 does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the page (via… |
| CVE-2017-18579 | CA Corner AD Dwbooster | 6.1 | Aug 22 | The corner-ad plugin before 1.0.8 for WordPress has XSS |
| CVE-2019-13505 | AH Appointment Hour Booking Dwbooster | 6.1 | Jul 11 | The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1 |