Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wp Booking Calendar MEDIUM 5.4
CVE-2025-4669

The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpbc shortcode in all versions up to, and …

Fix: after 10.11.1
Fix from $1,600 2025-05-17
Secure Downloads MEDIUM 6.5
CVE-2024-8031

The Secure Downloads WordPress plugin before 1.2.3 is vulnerable does not properly restrict which files can be downloaded. This makes it possible for…

Fix: 1.2.3+
Fix from $1,600 2025-05-15
Booking Calendar MEDIUM 5.3
CVE-2024-13821

The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in all versions up to, and inclu…

Fix: 10.10.1+
Fix from $1,600 2025-02-12
Wp Booking Calendar MEDIUM 5.4
CVE-2024-13323

The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'booking' shortcode in all versions up to,…

Fix: 10.9.3+
Fix from $1,600 2025-01-14
Wp Booking Calendar MEDIUM 6.1
CVE-2024-8274

The WP Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters from 'timeline_obj' in all versio…

Fix: 10.5.1+
Fix from $1,600 2024-08-30
Booking Calendar MEDIUM 5.4
CVE-2024-6930

The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute within the plugin's bookingform sh…

Fix: 10.2.2+
Fix from $1,600 2024-07-24
Booking Calendar CRITICAL 9.8
CVE-2024-1207

The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendar_request_params[dates_ddmmyy_csv]' parameter in all vers…

Fix: 9.9.1+
Fix from $2,300 2024-02-08
Booking Calendar MEDIUM 5.4
CVE-2023-51520

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPdevelop / Oplugins WP Booking Calendar allows…

Fix: 9.7.4+
Fix from $1,600 2024-02-01
Booking Calendar MEDIUM 6.1
CVE-2023-4620

The Booking Calendar WordPress plugin before 9.7.3.1 does not sanitize and escape some of its booking from data, allowing unauthenticated users to pe…

Fix: 9.7.3.1+
Fix from $1,600 2023-10-16