Product by WpDevArt
WpDevArt Booking Calendar
8 known vulnerabilities in WpDevArt Booking Calendar (WpDevArt), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-3982 | Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload | 9.8 | |
| High | CVE-2018-10363 | WpDevArt Booking Calendar: security vulnerability | 7.5 | |
| Critical | CVE-2022-47428 | WpDevArt Booking Calendar: SQL Injection | 6.7 | |
| Medium | CVE-2024-10856 | Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection | 6.5 | |
| High | CVE-2023-24407 | WpDevArt Booking Calendar: Missing Authorization | 5.0 | |
| Medium | CVE-2022-47438 | WpDevArt Booking Calendar: Cross-site Scripting | 5.9 | |
| Medium | CVE-2023-24388 | WpDevArt Booking Calendar: Cross-Site Request Forgery (CSRF) | 5.4 | |
| Critical | CVE-2023-24373 | WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability | 3.7 |