What’s Vulnerable › Vulnerabilities

CVE-2018-10363

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-13 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices.

Affected products

• wpdevart Booking calendar, Appointment Booking System: 2.2.2

References

• https://gist.github.com/B0UG/68d3161af0c0ec85c615ca7452f9755e
• https://gist.github.com/B0UG/68d3161af0c0ec85c615ca7452f9755e

Get alerted when CVE-2018-10363 or the next vulnerability affects your stack