PatchTheCVEbooking calendar vulnerabilities and fixes
Recent CVEs affecting booking calendar, with upgrade or downgrade steps. 4 tracked.
Also searched as: bookingcalendar.
booking calendar has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-02-12. Highest priority: CVE-2024-10856 (score 33/100).
- CVE-2024-6930 MEDIUM 6.4 UPGRADE The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attri
- CVE-2024-13821 MEDIUM 5.3 UPGRADE The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipu
- CVE-2024-10856 MEDIUM 6.5 UPGRADE The Booking Calendar WpDevArt plugin is vulnerable to time-based, blind SQL injection via the `id` parameter i
- CVE-2023-24407 MEDIUM 5.0 UPGRADE Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting
FAQ
How do I fix booking calendar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is booking calendar being exploited right now?
None of the tracked booking calendar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which booking calendar CVE should I patch first?
CVE-2024-10856 currently ranks highest (33/100): The Booking Calendar WpDevArt plugin is vulnerable to time-based, blind SQL injection via the `id` parameter i.