What’s Vulnerable › Products

stellarwp Bookit — Booking & Appointment Calendar vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your stellarwp Bookit — Booking & Appointment Calendar version is affected

Latest stellarwp Bookit — Booking & Appointment Calendar vulnerabilities

• CVE-2025-12633 — Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection (CVSS 7.5)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2023-50852 — WordPress BookIt Plugin <= 2.4.3 is vulnerable to SQL Injection (CVSS 7.2)
• CVE-2023-2834 — BookIt <= 2.3.7 - Authentication Bypass (CVSS 9.8)