Medium · 4.3 CVE-2023-51525 EUVD-2023-56237GHSA-p8rh-8mxv-5w8q

WordPress WP Simple Booking Calendar plugin <= 2.0.8.4 - Cross Site Request Forgery (CSRF) vulnerability

Published Mar 15, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Veribo, Roland Murg Product: WP Simple Booking Calendar

Description

Cross-Site Request Forgery (CSRF) vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4.

Affected products

Vendor	Product	Affected	Fixed
Veribo, Roland Murg	WP Simple Booking Calendar	≤ 2.0.8.4	—

References

https://patchstack.com/database/vulnerability/wp-simple-booking-calendar/wordpress-wp-simple-booking-calendar-plugin-2-0-8-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry

CNA	v3.1	4.3
EUVD	v3.1	5.3
CISA-ADP	v3.1	5.3