VendorsWpbookingcalendarwp_booking_calendarall versions
Vulnerabilities

Wpbookingcalendar Wp Booking Calendar

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2024-13323
Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode
Published 2025-01-14 · Analyzed
6.4EPSS 0.004
CVE-2025-4669
Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode
Published 2025-05-17 · Analyzed
6.4EPSS 0.003
CVE-2024-8274
WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting
Published 2024-08-30 · Analyzed
6.1EPSS 0.005
CVE-2024-10027
WP Booking Calendar < 10.6.3 - Admin+ Stored XSS
Published 2024-11-07 · Analyzed
4.8EPSS 0.004
CVE-2024-9306
WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Published 2024-10-04 · Analyzed
4.8EPSS 0.003
CVE-2024-10893
WP Booking Calendar < 10.6.5 - Admin+ Stored XSS
Published 2024-12-03 · Analyzed
4.8EPSS 0.003