Skip to content
OpenAdvisories

Vendor

WPdevelop/Oplugins

4 known vulnerabilities.

Products

Booking Calendar 1 WP Booking Calendar 1 Booking Calendar (WordPress plugin) 1 Booking Manager 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-51520

    WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPdevelop / Oplugins WP Booking Calendar allows Stored XSS.This issue affects WP Booking Calendar: from n/a before 9.7.4.

    WPdevelop/Oplugins WP Booking Calendar
  • Medium 5.4
    CVE-2022-33177

    WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity

    Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin <= 9.2.1 at WordPress leading to Translations Update.

    WPdevelop/Oplugins Booking Calendar (WordPress plugin) Web / CMS