WB
Product
WP Booking Calendar
6
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 6Low 0
Watch
Add WP Booking Calendar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8274 | 6.1 | Aug 30 | The WP Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters from 'timeline_obj' in all versions up to, and including, 10.5… Affected: before 10.5.1 |
| CVE-2025-4669 | 5.4 | May 17 | Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode Affected: through 10.11.1 |
| CVE-2024-13323 | 5.4 | Jan 14 | Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode Affected: before 10.9.3 |
| CVE-2024-10893 | 4.8 | Dec 3 | WP Booking Calendar < 10.6.5 - Admin+ Stored XSS Affected: before 10.6.5 |
| CVE-2024-10027 | 4.8 | Nov 7 | The WP Booking Calendar WordPress plugin before 10.6.3 does not sanitise and escape some of its Widgets settings, which could allow high privilege users such as admin to perform… Affected: before 10.6.3 |
| CVE-2024-9306 | 4.8 | Oct 4 | The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 10.6 due to insufficient input… Affected: before 10.6.1 |
Showing 6