BC
Product
Booking Calendar Contact Form
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 3Low 0
Watch
Add Booking Calendar Contact Form to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-10908 | 6.1 | Aug 21 | The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS Affected: before 1.0.24 |
| CVE-2026-6810 | 5.3 | Apr 24 | Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover Affected: through 1.2.63 |
| CVE-2025-13318 | 5.3 | Nov 22 | Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter Affected: through 1.2.60 |
Showing 3