Medium · 5.3 CVE-2022-36399 EUVD-2022-39112GHSA-54wr-xmjg-j9mj

WordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposure

Published Dec 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Boxy Studio Product: Booked - Appointment Booking for WordPress | Calendars Category: Web / CMS

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BoxyStudio Booked - Appointment Booking for WordPress | Calendars.This issue affects Booked - Appointment Booking for WordPress | Calendars: from n/a before 2.4.4.

Affected products

Vendor	Product	Affected	Fixed
BoxyStudio	Booked - Appointment Booking for WordPress \| Calendars	< 2.4.4	2.4.4

References

https://patchstack.com/database/vulnerability/booked/wordpress-booked-plugin-2-4-unauth-appointment-data-exposure-vulnerability?_s_id=cve vdb-entry