WpDevArt vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20221
3. 202314
4. 202411
5. 20257
6. 20269

Newest CVEs

• CVE-2026-16495

  Countdown Timer – Widget Countdown <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute

  wpdevart · Countdown Timer – Widget Countdown

  Medium6.4
• CVE-2026-73395

  WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability

  wpdevart · Booking calendar, Appointment Booking System

  Medium6.5
• CVE-2026-8840

  Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX Action

  wpdevart · Booking calendar, Appointment Booking System

  Medium5.3
• CVE-2026-57778

  WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerability

  wpdevart · Booking calendar, Appointment Booking System

  Medium5.3
• CVE-2026-15289

  Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'

  wpdevart · Booking calendar, Appointment Booking System

  Medium5.9
• CVE-2026-24597

  WordPress Organization chart plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerability

  WpDevArt · Organization chart

  Medium4.3
• CVE-2022-50959

  WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.php

  wpdevart · Contact Form Builder

  Medium5.1
• CVE-2026-25435

  WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Cross Site Scripting (XSS) vulnerability

  wpdevart · Booking calendar, Appointment Booking System

  High7.1
• CVE-2025-14555

  Countdown Timer - Widget Countdown <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  wpdevart · Countdown Timer – Widget Countdown

  Medium6.4
• CVE-2025-67574

  WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerability

  wpdevart · Booking calendar, Appointment Booking System

  Medium5.3