https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13821.htmlhttps://patchthecve.com/cve/CVE-2024-13821.htmlWed, 17 Jun 2026 07:02:47 +0000MEDIUM 5.3: The WP Booking Calendar plugin for WordPress is vulnerable to Unauthenticated Post-Confirmation Booking Manipulation in all versions up to, and including, 10.10. This is due to the plugin not properly requiring re-verification after a booking has been made and a change is being attempted. This makeshttps://patchthecve.com/cve/CVE-2024-10856.htmlhttps://patchthecve.com/cve/CVE-2024-10856.htmlWed, 17 Jun 2026 06:56:34 +0000MEDIUM 6.5: The Booking Calendar WpDevArt plugin is vulnerable to time-based, blind SQL injection via the `id` parameter in the “wpdevart_booking_calendar” shortcode in versions up to, and including, 3.2.19 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the exihttps://patchthecve.com/cve/CVE-2023-24407.htmlhttps://patchthecve.com/cve/CVE-2023-24407.htmlWed, 17 Jun 2026 05:39:09 +0000MEDIUM 5.0: Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3.https://patchthecve.com/cve/CVE-2024-6930.htmlhttps://patchthecve.com/cve/CVE-2024-6930.htmlWed, 17 Jun 2026 08:19:00 +0000MEDIUM 6.4: The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' attribute within the plugin's bookingform shortcode in all versions up to, and including, 10.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makeshttps://patchthecve.com/cve/CVE-2023-24373.htmlhttps://patchthecve.com/cve/CVE-2023-24373.htmlWed, 17 Jun 2026 05:39:05 +0000LOW 3.7: External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3.