Product by WPdevelop / Oplugins

    Booking Calendar

    6 known vulnerabilities in Booking Calendar (WPdevelop / Oplugins), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Booking Calendar (WPdevelop / Oplugins)
    CriticalCVE-2024-1207

    Booking Calendar <= 9.9 - Unauthenticated SQL Injection

    also in 1 other product

    		9.8
    MediumCVE-2023-4620

    Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS

    		6.1
    MediumCVE-2024-13821

    WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation

    also in 1 other product

    		5.3
    MediumCVE-2024-6930

    WPdevelop Booking Calendar: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-51520

    WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    MediumCVE-2022-33177

    WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity

    		5.4

    All products by WPdevelop / Oplugins