Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

WpDevArt vulnerabilities

44 published CVEs name WpDevArt among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-16495

    Countdown Timer – Widget Countdown <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute

    wpdevart · Countdown Timer – Widget Countdown

    Medium6.4
  • CVE-2026-73395

    WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability

    wpdevart · Booking calendar, Appointment Booking System

    Medium6.5
  • CVE-2026-8840

    Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX Action

    wpdevart · Booking calendar, Appointment Booking System

    Medium5.3
  • CVE-2026-57778

    WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerability

    wpdevart · Booking calendar, Appointment Booking System

    Medium5.3
  • CVE-2026-15289

    Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'

    wpdevart · Booking calendar, Appointment Booking System

    Medium5.9
  • CVE-2026-24597

    WordPress Organization chart plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability

    WpDevArt · Organization chart

    Medium4.3
  • CVE-2022-50959

    WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php

    wpdevart · Contact Form Builder

    Medium5.1
  • CVE-2026-25435

    WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Cross Site Scripting (XSS) vulnerability

    wpdevart · Booking calendar, Appointment Booking System

    High7.1
  • CVE-2025-14555

    Countdown Timer - Widget Countdown <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    wpdevart · Countdown Timer – Widget Countdown

    Medium6.4
  • CVE-2025-67574

    WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerability

    wpdevart · Booking calendar, Appointment Booking System

    Medium5.3
All 44 in the list