Product by CodePeople

    Booking Calendar

    10 known vulnerabilities in Booking Calendar (CodePeople), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Booking Calendar (CodePeople)
    HighCVE-2018-20556

    Booking Calendar Project Booking Calendar: SQL Injection

    		8.8
    HighCVE-2022-1463

    Booking Calendar <= 9.1 - PHP Object Injection via Shortcode

    also in 1 other product

    		8.8
    MediumCVE-2017-2150

    WPdevelop Booking Calendar: Path Traversal

    also in 1 other product

    		5.3
    HighCVE-2018-5673

    Booking Calendar Project Booking Calendar: Cross-Site Request Forgery (CSRF)

    		8.8
    MediumCVE-2017-2151

    WPdevelop Booking Calendar: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    MediumCVE-2021-25040

    Booking Calendar < 8.9.2 - Reflected Cross-Site Scripting

    		6.1
    HighCVE-2023-36384

    WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    MediumCVE-2018-5671

    Booking Calendar Project Booking Calendar: Cross-Site Scripting (XSS)

    		4.8
    MediumCVE-2018-5672

    Booking Calendar Project Booking Calendar: Cross-Site Scripting (XSS)

    		4.8
    MediumCVE-2018-5670

    Booking Calendar Project Booking Calendar: Cross-Site Scripting (XSS)

    		4.8

    All products by CodePeople