w
wpdevelop
Security Risk Profile
41
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 26, 2024 to present
5
Total CVEs
1
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
41/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
1Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
4
2
SQL Injection
1
Most Affected Products
1. WPdevelop Booking Calendar2
2. wpdevelop Booking Manager2
3. WordPress Booking Manager1
4. wpdevelop Email Reminders1
5. oplugins Booking Calendar1
Recent Vulnerabilities
See more →CVE-2026-93655
CVSS 6.1medium
Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter
Sep 22, 2026🔧 No Patch
CVE-2026-42751
CVSS 6.5medium
WordPress Booking Manager plugin <= 2.1.18 - Cross Site Scripting (XSS) vulnerability
May 27, 2026🔧 No Patch
CVE-2025-64275
CVSS 6.5medium
WordPress Booking Manager plugin <= 2.1.17 - Cross Site Scripting (XSS) vulnerability
Nov 13, 2025🔧 No Patch
CVE-2024-56292
CVSS 5.9medium
WordPress Email Reminders Plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability
Jan 7, 2025
CVE-2023-23991
CVSS 7.6high
WordPress Booking Calendar plugin <= 9.4.3 - SQL Injection
Mar 26, 2024
Monitor wpdevelop in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.