Login Request a demo
BC
Product
Booking Calendar
by Wpdevart · last CVE Dec 24, 2024
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 3Medium 3Low 0
Severity
All severities9Critical3High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Booking Calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-24373
9.8
0%
Jun 3
External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.This issue affects…
Affected: before 3.2.4
CVE-2022-47428
9.8
1%
Nov 6
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL…
Affected: before 3.2.8
CVE-2022-3982
9.8
5%
Dec 12
The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files,…
Affected: before 3.2.2
CVE-2023-24407
8.8
1%
Dec 9
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerability
Affected: before 3.2.4
CVE-2018-10363
7.5
1%
Jun 13
An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress
Affected: 2.2.2
CVE-2024-9504
7.2
0%
Nov 26
Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Affected: through 3.2.15
CVE-2024-10856
6.5
0%
Dec 24
Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection
Affected: before 3.2.0
CVE-2022-47438
5.4
0%
Mar 29
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions
Affected: through 3.2.3
CVE-2023-24388
5.4
0%
Feb 17
Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions affects plugin forms actions (create, duplicate,…
Affected: before 3.2.4
Showing 9