VendorsWpbookingcalendarbooking_calendarany version
Vulnerabilities

Wpbookingcalendar Booking Calendar any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2024-1207
Booking Calendar <= 9.9 - Unauthenticated SQL Injection
Published 2024-02-08 · Modified
9.8EPSS 0.032
CVE-2023-51520
WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)
Published 2024-02-01 · Modified
6.5EPSS 0.003
CVE-2024-6930
WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode
Published 2024-07-24 · Modified
6.4EPSS 0.003
CVE-2023-4620
Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS
Published 2023-10-16 · Modified
6.1EPSS 0.005
CVE-2022-33177
WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity
Published 2022-09-06 · Modified
5.4EPSS 0.003
CVE-2024-13821
WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation
Published 2025-02-12 · Analyzed
5.3EPSS 0.004