WP
Vendor
Wpbookingcalendar
13
CVEs
0
On KEV
0
New 30D
Products
BC9.8
Booking Calendar
Wpbookingcalendar
6 CVEs0 on KEV0 new
WB6.1
WP Booking Calendar
Wpbookingcalendar
6 CVEs0 on KEV0 new
SD6.5
Secure Downloads
Wpbookingcalendar
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-4669 | WB WP Booking Calendar Wpbookingcalendar | 5.4 | May 17 | Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode |
| CVE-2024-8031 | SD Secure Downloads Wpbookingcalendar | 6.5 | May 15 | Secure Downloads < 1.2.3 - Admin+ Arbitrary File Download |
| CVE-2024-13821 | BC Booking Calendar Wpbookingcalendar | 5.3 | Feb 12 | WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation |
| CVE-2024-13323 | WB WP Booking Calendar Wpbookingcalendar | 5.4 | Jan 14 | Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode |
| CVE-2024-10893 | WB WP Booking Calendar Wpbookingcalendar | 4.8 | Dec 3 | WP Booking Calendar < 10.6.5 - Admin+ Stored XSS |
| CVE-2024-10027 | WB WP Booking Calendar Wpbookingcalendar | 4.8 | Nov 7 | WP Booking Calendar < 10.6.3 - Admin+ Stored XSS |
| CVE-2024-9306 | WB WP Booking Calendar Wpbookingcalendar | 4.8 | Oct 4 | WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2024-8274 | WB WP Booking Calendar Wpbookingcalendar | 6.1 | Aug 30 | WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting |
| CVE-2024-6930 | BC Booking Calendar Wpbookingcalendar | 5.4 | Jul 24 | WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode |
| CVE-2024-1207 | BC Booking Calendar Wpbookingcalendar | 9.8 | Feb 8 | Booking Calendar <= 9.9 - Unauthenticated SQL Injection |
| CVE-2023-51520 | BC Booking Calendar Wpbookingcalendar | 5.4 | Feb 1 | WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-4620 | BC Booking Calendar Wpbookingcalendar | 6.1 | Oct 16 | Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS |
| CVE-2022-33177 | BC Booking Calendar Wpbookingcalendar | 4.3 | Sep 6 | Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin <= 9.2.1 at WordPress leading to Translations Update |