BC
Product
Booking Calendar
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 5Low 0
Watch
Add Booking Calendar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1207 | 9.8 | Feb 8 | The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendar_request_params[dates_ddmmyy_csv]' parameter in all versions up to, and including, 9.9… Affected: before 9.9.1 |
| CVE-2023-4620 | 6.1 | Oct 16 | The Booking Calendar WordPress plugin before 9.7.3.1 does not sanitize and escape some of its booking from data, allowing unauthenticated users to perform Stored Cross-Site… Affected: before 9.7.3.1 |
| CVE-2024-6930 | 5.4 | Jul 24 | WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode Affected: before 10.2.2 |
| CVE-2023-51520 | 5.4 | Feb 1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPdevelop / Oplugins WP Booking Calendar allows Stored XSS.This issue affects… Affected: before 9.7.4 |
| CVE-2024-13821 | 5.3 | Feb 12 | WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation Affected: before 10.10.1 |
| CVE-2022-33177 | 4.3 | Sep 6 | Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin <= 9.2.1 at WordPress leading to Translations Update Affected: through 9.2.1 |
Showing 6