WP
Vendor
Wpbookingcalendar
13
CVEs
0
On KEV
0
New 30D
Products
BC9.8
Booking Calendar
Wpbookingcalendar
6 CVEs0 on KEV0 new
WB6.1
WP Booking Calendar
Wpbookingcalendar
6 CVEs0 on KEV0 new
SD6.5
Secure Downloads
Wpbookingcalendar
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-4669 | WB WP Booking Calendar Wpbookingcalendar | 5.4 | May 17 | Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode |
| CVE-2024-8031 | SD Secure Downloads Wpbookingcalendar | 6.5 | May 15 | Secure Downloads < 1.2.3 - Admin+ Arbitrary File Download |
| CVE-2024-13821 | BC Booking Calendar Wpbookingcalendar | 5.3 | Feb 12 | WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation |
| CVE-2024-13323 | WB WP Booking Calendar Wpbookingcalendar | 5.4 | Jan 14 | Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode |
| CVE-2024-10893 | WB WP Booking Calendar Wpbookingcalendar | 4.8 | Dec 3 | WP Booking Calendar < 10.6.5 - Admin+ Stored XSS |
| CVE-2024-10027 | WB WP Booking Calendar Wpbookingcalendar | 4.8 | Nov 7 | WP Booking Calendar < 10.6.3 - Admin+ Stored XSS |
| CVE-2024-9306 | WB WP Booking Calendar Wpbookingcalendar | 4.8 | Oct 4 | The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 10.6 due to insufficient input… |
| CVE-2024-8274 | WB WP Booking Calendar Wpbookingcalendar | 6.1 | Aug 30 | The WP Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters from 'timeline_obj' in all versions up to, and including, 10.5… |
| CVE-2024-6930 | BC Booking Calendar Wpbookingcalendar | 5.4 | Jul 24 | The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute within the plugin's bookingform shortcode in all versions up to,… |
| CVE-2024-1207 | BC Booking Calendar Wpbookingcalendar | 9.8 | Feb 8 | The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendar_request_params[dates_ddmmyy_csv]' parameter in all versions up to, and including, 9.9… |
| CVE-2023-51520 | BC Booking Calendar Wpbookingcalendar | 5.4 | Feb 1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPdevelop / Oplugins WP Booking Calendar allows Stored XSS.This issue affects… |
| CVE-2023-4620 | BC Booking Calendar Wpbookingcalendar | 6.1 | Oct 16 | The Booking Calendar WordPress plugin before 9.7.3.1 does not sanitize and escape some of its booking from data, allowing unauthenticated users to perform Stored Cross-Site… |
| CVE-2022-33177 | BC Booking Calendar Wpbookingcalendar | 4.3 | Sep 6 | Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin <= 9.2.1 at WordPress leading to Translations Update |