Known Vulnerabilities for Booking Calendar by Wpdevart
Listed below are 6 of the newest known vulnerabilities associated with "Booking Calendar" by "Wpdevart".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-84768 json | Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions. | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-77705 json | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a cust... | Not Provided | 2026-09-12 | 2026-09-12 |
| CVE-2026-77704 json | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required... | Not Provided | 2026-08-29 | 2026-08-30 |
| CVE-2026-77689 json | The Booking for Appointments and Events Calendar WordPress plugin before 9.8.1 does not verify that a payment was actually t... | Not Provided | 2026-09-12 | 2026-09-12 |
| CVE-2026-76586 json | The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.6.3 does not verify the amount actua... | Not Provided | 2026-08-29 | 2026-08-30 |
| CVE-2026-73395 json | Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking System <= 3.2.36 versions. | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-59558 json | Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-57778 json | Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiti... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-52837 json | Easy!Appointments is a self hosted appointment scheduler. In versions up to and including 1.5.2, the booking reschedule view ... | Not Provided | 2026-07-14 | 2026-07-29 |
| CVE-2026-27377 json | Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions. | Not Provided | 2026-07-23 | 2026-07-23 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Wpdevart | Booking Calendar | 2.4.2 | |||
| Application | Wpdevart | Booking Calendar | 2.4.1 | |||
| Application | Wpdevart | Booking Calendar | 2.4.0 | |||
| Application | Wpdevart | Booking Calendar | 2.3.9 | |||
| Application | Wpdevart | Booking Calendar | 2.3.8 | |||
| Application | Wpdevart | Booking Calendar | 2.3.7 | |||
| Application | Wpdevart | Booking Calendar | 2.3.6 | |||
| Application | Wpdevart | Booking Calendar | 2.3.5 | |||
| Application | Wpdevart | Booking Calendar | 2.3.4 | |||
| Application | Wpdevart | Booking Calendar | 2.3.3 | |||
| Application | Wpdevart | Booking Calendar | 2.3.2 | |||
| Application | Wpdevart | Booking Calendar | 2.3.1 | |||
| Application | Wpdevart | Booking Calendar | 2.3.0 | |||
| Application | Wpdevart | Booking Calendar | 2.2.9 | |||
| Application | Wpdevart | Booking Calendar | 2.2.8 | |||
| Application | Wpdevart | Booking Calendar | 2.2.7 | |||
| Application | Wpdevart | Booking Calendar | 2.2.6 | |||
| Application | Wpdevart | Booking Calendar | 2.2.5 | |||
| Application | Wpdevart | Booking Calendar | 2.2.4 | |||
| Application | Wpdevart | Booking Calendar | 2.2.3 |