Login Request a demo
BC
Product
Booking Calendar Contact Form
by codepeople · last CVE Apr 24, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 0Medium 3Low 0
Severity
All severities4Critical1High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Booking Calendar Contact Form to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-10909
9.8
2%
Aug 21
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection
Affected: before 1.0.24
CVE-2016-10908
6.1
1%
Aug 21
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS
Affected: before 1.0.24
CVE-2026-6810
5.3
0%
Apr 24
Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover
Affected: through 1.2.63
CVE-2025-13318
5.3
0%
Nov 22
Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter
Affected: through 1.2.60
Showing 4