wpdevelop vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 20221
3. 20245
4. 20259
5. 202613

Newest CVEs

• CVE-2026-18496

  Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action

  wpdevelop · Booking Calendar

  Medium5.3
• CVE-2026-39601

  WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerability

  WPdevelop · Booking Calendar

  Low3.7
• CVE-2026-93655

  Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter

  wpdevelop · Booking Calendar

  Medium6.1
• CVE-2026-92561

  Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameter

  wpdevelop · Booking Calendar

  Medium6.1
• CVE-2026-92619

  Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter

  wpdevelop · Booking Calendar

  High7.2
• CVE-2026-74002

  WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability

  wpdevelop · Booking Calendar

  Medium5.3
• CVE-2026-59558

  WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability

  wpdevelop · Booking Calendar

  High7.1
• CVE-2026-42751

  WordPress Booking Manager plugin <= 2.1.18 - Cross Site Scripting (XSS) vulnerability

  wpdevelop · Booking Manager

  Medium6.5
• CVE-2026-32358

  WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability

  wpdevelop · Booking Calendar

  High7.6
• CVE-2026-2230

  Booking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings Modification

  wpdevelop · Booking Calendar

  Medium4.3