WordPress Booking Calendar, Appointment Booking System Vulnerabilities

Wordpress Booking Calendar, Appointment Booking System vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

29 July 2025

Privilege Escalation Vulnerability in Hydra Booking Plugin for WordPress
CVE-2025-7689
WordPressHydra Booking – All In...8.8HIGH

7 January 2025

Reflected Cross-Site Scripting Vulnerability in Booking Calendar Plugins by WordPress
CVE-2024-12077
WordpressBooking Calendar, Appo...6.1MEDIUM

9 December 2024

WpDevArt Booking Calendar Vulnerable to Missing Authorization
CVE-2023-24407
WordPressBooking Calendar, Appo...8.8HIGH

16 October 2024

Freemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974
WordpressYasr – Yet Another Sta...6.3MEDIUM

3 June 2024

Manipulating Hidden Fields in WpDevArt Booking Calendar
CVE-2023-24373
WordPressBooking Calendar, Appo...9.8CRITICAL

6 November 2023

WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection
CVE-2022-47428
WordPressBooking Calendar, Appo...9.8CRITICAL

29 March 2023

WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-47438
WordPressBooking calendar, Appo...5.4MEDIUM

17 February 2023

WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-24388
WordPressBooking calendar, Appo...5.4MEDIUM

12 December 2022

Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload
CVE-2022-3982
WordpressBooking Calendar, Appo...👾🟡EPSS 90%9.8CRITICAL

4 April 2022

Booking Package < 1.5.29 - Unauthenticated Sensitive Data Disclosure
CVE-2022-0709
WordpressBooking Package – Appo...7.5HIGH