Skip to content
OpenAdvisories

Vendor

wpdevart

44 known vulnerabilities.

Products

Booking calendar, Appointment Booking System 14 Responsive Image Gallery, Gallery Album 5 Organization chart 4 Gallery – Image and Video Gallery with Thumbnails 3 Responsive Vertical Icon Menu 2 Contact Form Builder, Contact Widget 2 Countdown Timer – Widget Countdown 2 Widget Countdown 2 YouTube Embed, Playlist and Popup by WpDevArt 2 Countdown and CountUp, WooCommerce Sales Timer 1 Countdown and CountUp, WooCommerce Sales Timers 1 Poll, Survey, Questionnaire and Voting system 1 Poll, Survey, Questionnaire and Voting system (WordPress plugin) 1 Coming soon and Maintenance mode 1 Contact Form Builder 1 Image and Video Lightbox, Image PopUp 1 Pricing Table builder 1 Booking Calendar Pro WpDevArt 1
All Critical High Medium Low Exploited only Public exploit

44 results · Feed

  • Medium 5.4
    CVE-2023-24388

    WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions affects plugin forms actions (create, duplicate, edit, delete).

    wpdevart Booking calendar, Appointment Booking System
  • Medium 4.8
    CVE-2022-34656

    WordPress Poll, Survey, Questionnaire and Voting system plugin <= 1.7.4 - Authenticated Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin+) Cross-Site Scripting (XSS) vulnerability in wpdevart Poll, Survey, Questionnaire and Voting system plugin <= 1.7.4 at WordPress.

    wpdevart Poll, Survey, Questionnaire and Voting system (WordPress plugin) Web / CMS
  • High 8.8
    CVE-2021-34636

    Countdown and CountUp, WooCommerce Sales Timer <= 1.5.7 Cross-Site Request Forgery to Stored Cross-Site Scripting

    The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the ~/includes/admin/coundown_theme_page.php file due to a missing nonce check which allows attackers to inje…

    wpdevart Countdown and CountUp, WooCommerce Sales Timers Web / CMS
  • Unscored —
    CVE-2021-24442 EPSS 46%

    Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injection

    The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3 did not sanitise, escape or validate the date_answers[] POST parameter before using it in a SQL statement when sending a Poll result, allowing unauthenticated users to perform SQL…

    wpdevart Poll, Survey, Questionnaire and Voting system Web / CMS