Booking Calendar
Wpdevart · 9 CVEs
Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection
Dec 24, 2024
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerability
Dec 9, 2024
Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Nov 26, 2024
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability
Jun 3, 2024
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection
Nov 6, 2023
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)
Mar 29, 2023
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSR…
Feb 17, 2023
Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload
Dec 12, 2022
An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Mult…
Jun 13, 2018
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-10856 | Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection | MEDIUM | 0.49% | Dec 24, 2024 |
| CVE-2023-24407 | WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerability | HIGH | 0.50% | Dec 9, 2024 |
| CVE-2024-9504 | Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload | HIGH | 0.47% | Nov 26, 2024 |
| CVE-2023-24373 | WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability | CRITICAL | 0.35% | Jun 3, 2024 |
| CVE-2022-47428 | WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection | CRITICAL | 0.68% | Nov 6, 2023 |
| CVE-2022-47438 | WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS) | MEDIUM | 0.38% | Mar 29, 2023 |
| CVE-2023-24388 | WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF) | MEDIUM | 0.23% | Feb 17, 2023 |
| CVE-2022-3982 | Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload | CRITICAL | 4.54% | Dec 12, 2022 |
| CVE-2018-10363 | An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers t… | HIGH | 1.37% | Jun 13, 2018 |
Showing 1 to 9 of 9 CVEs