BC
Product
Booking Calendar
19
CVEs
0
On KEV
7.6
Max CVSS
2
New 30D
Severity mix
Critical 0High 4Medium 14Low 1
Watch
Add Booking Calendar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32358 | 7.6 | Mar 13 | WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability Affected: through 10.14.15 |
| CVE-2025-14383 | 7.5 | Dec 15 | Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_check Affected: through 10.14.8 |
| CVE-2026-92619 | 7.2 | Sep 18 | Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter Affected: through 11.8.2 |
| CVE-2026-59558 | 7.1 | Jul 27 | WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability Affected: through 11.4.2 |
Showing 4