Skip to content
OpenAdvisories

Vendor

dwbooster

6 known vulnerabilities.

Products

Booking Calendar Contact Form 3 CP Polls 2 Appointment Booking Calendar 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2016-20070

    WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS

    WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabilities that allow authenticated users to modify plugin options and inject malicious scripts by failing to verify user privileges and sanitize…

    dwbooster Booking Calendar Contact Form
  • Medium 4.3
    CVE-2016-20067

    WordPress CP Polls 1.0.8 Cross-Site Request Forgery

    WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated users. Attackers can craft malicious HTML pages that execute unwanted poll operations when administra…

    dwbooster CP Polls