Known Vulnerabilities for Booking Calendar by Wpdevart
Listed below are 6 of the newest known vulnerabilities associated with "Booking Calendar" by "Wpdevart".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59558 json | Unauthenticated Cross Site Scripting (XSS) in Booking Calendar <= 11.4.2 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-57778 json | Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiti... | Not Provided | 2026-07-13 | 2026-07-13 |
| CVE-2026-52837 json | Easy!Appointments is a self hosted appointment scheduler. In versions up to and including 1.5.2, the booking reschedule view ... | Not Provided | 2026-07-14 | 2026-07-29 |
| CVE-2026-27377 json | Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions. | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-17166 json | The Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar plugin for WordPress is... | Not Provided | 2026-07-29 | 2026-07-29 |
| CVE-2026-17023 json | The Salon Booking System WordPress plugin through 10.30.33 does not perform any capability check or validate an OAuth state ... | Not Provided | 2026-08-10 | 2026-08-11 |
| CVE-2026-15918 json | VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the pa... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-15289 json | The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wp... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-14782 json | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Custo... | Not Provided | 2026-07-16 | 2026-07-17 |
| CVE-2026-14214 json | The Booking for Appointments and Events Calendar WordPress plugin before 2.4.4 does not restrict which fields can be written... | Not Provided | 2026-08-01 | 2026-08-05 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Wpdevart | Booking Calendar | 2.4.2 | |||
| Application | Wpdevart | Booking Calendar | 2.4.1 | |||
| Application | Wpdevart | Booking Calendar | 2.4.0 | |||
| Application | Wpdevart | Booking Calendar | 2.3.9 | |||
| Application | Wpdevart | Booking Calendar | 2.3.8 | |||
| Application | Wpdevart | Booking Calendar | 2.3.7 | |||
| Application | Wpdevart | Booking Calendar | 2.3.6 | |||
| Application | Wpdevart | Booking Calendar | 2.3.5 | |||
| Application | Wpdevart | Booking Calendar | 2.3.4 | |||
| Application | Wpdevart | Booking Calendar | 2.3.3 | |||
| Application | Wpdevart | Booking Calendar | 2.3.2 | |||
| Application | Wpdevart | Booking Calendar | 2.3.1 | |||
| Application | Wpdevart | Booking Calendar | 2.3.0 | |||
| Application | Wpdevart | Booking Calendar | 2.2.9 | |||
| Application | Wpdevart | Booking Calendar | 2.2.8 | |||
| Application | Wpdevart | Booking Calendar | 2.2.7 | |||
| Application | Wpdevart | Booking Calendar | 2.2.6 | |||
| Application | Wpdevart | Booking Calendar | 2.2.5 | |||
| Application | Wpdevart | Booking Calendar | 2.2.4 | |||
| Application | Wpdevart | Booking Calendar | 2.2.3 |