Skip to content
OpenAdvisories

Vendor

wpdevelop

30 known vulnerabilities.

Products

Booking Calendar 26 Booking Manager 2 Email Reminders 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-1207

    Booking Calendar <= 9.9 - Unauthenticated SQL Injection

    The WP Booking Calendar plugin for WordPress is vulnerable to SQL Injection via the 'calendar_request_params[dates_ddmmyy_csv]' parameter in all versions up to, and including, 9.9 due to insufficient escaping on the user supplied parameter and lack of suffici…

    wpdevelop Booking Calendar Web / CMS