BC
Product
Booking calendar, Appointment Booking System
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 7Low 0
Watch
Add Booking calendar, Appointment Booking System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73395 | 6.5 | Aug 18 | WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.2.36 |
| CVE-2024-10856 | 6.5 | Dec 24 | Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection Affected: through 3.2.19 |
| CVE-2024-12077 | 6.1 | Jan 7 | Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id' Affected: through 3.2.19 |
| CVE-2026-15289 | 5.9 | Jul 10 | Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id' Affected: through 3.2.17 |
| CVE-2026-8840 | 5.3 | Aug 15 | Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX Action Affected: through 3.2.36 |
| CVE-2026-57778 | 5.3 | Jul 13 | WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerability Affected: through 3.2.36 |
| CVE-2025-67574 | 5.3 | Dec 9 | WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerability Affected: through 3.2.30 |
Showing 7