Description
Unauth. SQL Injection (SQLi) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Advanced Booking Calendar | Advanced Booking Calendar | ≤ 1.7.1 | — |
Critical · 10.0
CVE-2022-45822
EUVD-2022-48676GHSA-8jj9-3j76-6vp2
WordPress Advanced Booking Calendar Plugin <= 1.7.1 is vulnerable to SQL Injection
Published Dec 5, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack