Filter
-Infinity
0
Booking CalendarBooking Calendar and Notification <= 4.0.3 - Missing Authorization via wpcb_all_bookings, wpcb_update_booking_post, and wpcb_delete_posts Functions
6.5
First published (updated )
WP Booking CalendarWP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation
5.3
First published (updated )
Booking CalendarBooking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection
6.5
First published (updated )
WpDevArt Booking CalendarWordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerability
8.8
First published (updated )
Booking CalendarWP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scripting
4.8
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Booking CalendarWP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting
6.1
EPSS
0.05%
First published (updated )
Booking CalendarWP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode
6.4
EPSS
0.05%
First published (updated )
WpDevArt Booking CalendarWordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Booking CalendarWordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)
6.5
EPSS
0.04%
First published (updated )
Booking CalendarWordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection
9.8
First published (updated )
Booking CalendarBooking Calendar < 9.7.3.1 - Unauthenticated Stored XSS
6.1
First published (updated )
Booking CalendarWordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)
7.1
First published (updated )
Booking CalendarWordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Booking CalendarWordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
5.4
First published (updated )
Booking CalendarBooking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload
9.8
First published (updated )
Booking CalendarWordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity
5.4
First published (updated )
Booking CalendarBooking Calendar <= 9.1 - PHP Object Injection via Shortcode
8.8
First published (updated )
Booking CalendarBooking Calendar < 8.9.2 - Reflected Cross-Site Scripting
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.