What’s Vulnerable › Products

WPdevelop/Oplugins Booking Calendar (WordPress plugin) vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your WPdevelop/Oplugins Booking Calendar (WordPress plugin) version is affected

Latest WPdevelop/Oplugins Booking Calendar (WordPress plugin) vulnerabilities

• CVE-2024-13821 — WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation (CVSS 5.3)
• CVE-2024-6930 — WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode (CVSS 5.4)
• CVE-2024-1207 — Booking Calendar <= 9.9 - Unauthenticated SQL Injection (CVSS 9.8)
• CVE-2023-51520 — WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2023-4620 — Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS (CVSS 6.1)
• CVE-2022-33177 — WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity (CVSS 4.3)