Skip to content
OpenAdvisories
High · 7.6 CVE-2026-32358 EUVD-2026-11848GHSA-64c8-w3fx-v572

WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevelop Booking Calendar booking allows Blind SQL Injection.This issue affects Booking Calendar: from n/a through <= 10.14.15.

Affected products

VendorProductAffectedFixed
wpdevelop Booking Calendar ≤ 10.14.15 —

References