Product by CodePeople

    Booking Calendar Contact Form

    8 known vulnerabilities in Booking Calendar Contact Form (CodePeople), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Booking Calendar Contact Form (CodePeople)
    CriticalCVE-2016-10909

    Booking Calendar Contact Form: SQL Injection

    		9.8
    MediumCVE-2016-10908

    Booking Calendar Contact Form: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2023-36384

    WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    MediumCVE-2026-6810

    CodePeople Booking Calendar Contact Form: Authorization Bypass Through User-Controlled Key

    		5.3
    MediumCVE-2023-25037

    WordPress Booking Calendar Contact Form plugin <= 1.2.34 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2025-13318

    CodePeople Booking Calendar Contact Form: Missing Authorization

    		5.3
    MediumCVE-2025-48231

    WordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) Vulnerability

    		6.5
    MediumCVE-2025-24723

    CodePeople Booking Calendar Contact Form: Cross-site Scripting

    		5.9

    All products by CodePeople