WP
Vendor
wpdevelop
21
CVEs
0
On KEV
2
New 30D
Products
BC7.6
Booking Calendar
wpdevelop
18 CVEs0 on KEV2 new
BM6.5
Booking Manager
wpdevelop
2 CVEs0 on KEV0 new
ER5.9
Email Reminders
wpdevelop
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-18496 | BC Booking Calendar wpdevelop | 5.3 | Oct 10 | Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action |
| CVE-2026-39601 | BC Booking Calendar WPdevelop | 3.7 | Oct 2 | WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerability |
| CVE-2026-93655 | BC Booking Calendar wpdevelop | 6.1 | Sep 22 | Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter |
| CVE-2026-92561 | BC Booking Calendar wpdevelop | 6.1 | Sep 18 | Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameter |
| CVE-2026-92619 | BC Booking Calendar wpdevelop | 7.2 | Sep 18 | Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter |
| CVE-2026-74002 | BC Booking Calendar wpdevelop | 5.3 | Sep 17 | WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability |
| CVE-2026-59558 | BC Booking Calendar wpdevelop | 7.1 | Jul 27 | WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42751 | BM Booking Manager wpdevelop | 6.5 | May 27 | WordPress Booking Manager plugin <= 2.1.18 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-32358 | BC Booking Calendar wpdevelop | 7.6 | Mar 13 | WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability |
| CVE-2026-2230 | BC Booking Calendar wpdevelop | 4.3 | Feb 18 | Booking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings Modification |
| CVE-2026-1431 | BC Booking Calendar wpdevelop | 5.3 | Jan 31 | Booking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposure |
| CVE-2025-14982 | BC Booking Calendar wpdevelop | 4.3 | Jan 16 | Booking Calendar <= 10.14.11 - Missing Authorization to Sensitive Information Exposure |
| CVE-2025-14146 | BC Booking Calendar wpdevelop | 5.3 | Jan 9 | Booking Calendar <= 10.14.10 - Unauthenticated Sensitive Information Exposure |
| CVE-2025-14383 | BC Booking Calendar wpdevelop | 7.5 | Dec 15 | Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_check |
| CVE-2025-12804 | BC Booking Calendar wpdevelop | 6.4 | Dec 5 | Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcode |
| CVE-2025-64381 | BC Booking Calendar wpdevelop | 6.5 | Nov 13 | WordPress Booking Calendar plugin <= 10.14.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-64275 | BM Booking Manager wpdevelop | 6.5 | Nov 13 | WordPress Booking Manager plugin <= 2.1.17 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-9346 | BC Booking Calendar wpdevelop | 6.4 | Aug 28 | Booking Calendar <= 10.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-4669 | BC Booking Calendar wpdevelop | 5.4 | May 17 | Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode |
| CVE-2024-13821 | BC Booking Calendar wpdevelop | 5.3 | Feb 12 | WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation |
| CVE-2024-56292 | ER Email Reminders wpdevelop | 5.9 | Jan 7 | WordPress Email Reminders Plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability |