Product by WpDevArt

    WpDevArt Booking Calendar

    8 known vulnerabilities in WpDevArt Booking Calendar (WpDevArt), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WpDevArt Booking Calendar (WpDevArt)
    CriticalCVE-2022-3982

    Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload

    9.8
    HighCVE-2018-10363

    WpDevArt Booking Calendar: security vulnerability

    7.5
    CriticalCVE-2022-47428

    WpDevArt Booking Calendar: SQL Injection

    also in 1 other product

    6.7
    MediumCVE-2024-10856

    Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection

    also in 1 other product

    6.5
    HighCVE-2023-24407

    WpDevArt Booking Calendar: Missing Authorization

    also in 1 other product

    5.0
    MediumCVE-2022-47438

    WpDevArt Booking Calendar: Cross-site Scripting

    also in 1 other product

    5.9
    MediumCVE-2023-24388

    WpDevArt Booking Calendar: Cross-Site Request Forgery (CSRF)

    also in 1 other product

    5.4
    CriticalCVE-2023-24373

    WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability

    also in 1 other product

    3.7

    All products by WpDevArt