wpdevelop Booking Calendar vulnerabilities
26 published CVEs name wpdevelop Booking Calendar among the affected products.
- 26Published CVEs26 of them scored
- 14Last 12 monthspublished in the last year
- 1Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-18496
Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action
wpdevelop · Booking Calendar
Medium5.3 - CVE-2026-39601
WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerability
WPdevelop · Booking Calendar
Low3.7 - CVE-2026-93655
Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter
wpdevelop · Booking Calendar
Medium6.1 - CVE-2026-92561
Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameter
wpdevelop · Booking Calendar
Medium6.1 - CVE-2026-92619
Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter
wpdevelop · Booking Calendar
High7.2 - CVE-2026-74002
WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability
wpdevelop · Booking Calendar
Medium5.3 - CVE-2026-59558
WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability
wpdevelop · Booking Calendar
High7.1 - CVE-2026-32358
WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability
wpdevelop · Booking Calendar
High7.6 - CVE-2026-2230
Booking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings Modification
wpdevelop · Booking Calendar
Medium4.3 - CVE-2026-1431
Booking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposure
wpdevelop · Booking Calendar
Medium5.3