Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-33177 EUVD-2022-36221GHSA-6fq7-fhm4-vgcg

WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity

Published Sep 6, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WPdevelop/Oplugins Product: Booking Calendar (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in WPdevelop/Oplugins Booking Calendar plugin <= 9.2.1 at WordPress leading to Translations Update.

Affected products

VendorProductAffectedFixed
WPdevelop/Oplugins Booking Calendar (WordPress plugin) <= 9.2.1 – ≤ 9.2.1 —

References