Login Request a demo
WB
Product
WP Booking Calendar
by Wpbookingcalendar · last CVE May 17, 2025
6
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 0Medium 6Low 0
Severity
All severities6Critical0High0Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Booking Calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-8274
6.1
0%
Aug 30
The WP Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters from 'timeline_obj' in all versions up to, and including, 10.5…
Affected: before 10.5.1
CVE-2025-4669
5.4
0%
May 17
Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode
Affected: through 10.11.1
CVE-2024-13323
5.4
0%
Jan 14
Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode
Affected: before 10.9.3
CVE-2024-10893
4.8
0%
Dec 3
WP Booking Calendar < 10.6.5 - Admin+ Stored XSS
Affected: before 10.6.5
CVE-2024-10027
4.8
0%
Nov 7
WP Booking Calendar < 10.6.3 - Admin+ Stored XSS
Affected: before 10.6.3
CVE-2024-9306
4.8
0%
Oct 4
The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 10.6 due to insufficient input…
Affected: before 10.6.1
Showing 6