PatchTheCVE: bookingultraprohttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-32511: Unauthhttps://patchthecve.com/cve/CVE-2023-32511.htmlhttps://patchthecve.com/cve/CVE-2023-32511.htmlWed, 17 Jun 2026 05:59:00 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.8 versions.CVE-2023-32236: Unauthhttps://patchthecve.com/cve/CVE-2023-32236.htmlhttps://patchthecve.com/cve/CVE-2023-32236.htmlWed, 17 Jun 2026 05:58:22 +0000HIGH 7.1: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin <= 1.1.8 versions.CVE-2022-46816: Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plughttps://patchthecve.com/cve/CVE-2022-46816.htmlhttps://patchthecve.com/cve/CVE-2022-46816.htmlWed, 17 Jun 2026 05:12:26 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.4 versions.CVE-2021-36855: Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= https://patchthecve.com/cve/CVE-2021-36855.htmlhttps://patchthecve.com/cve/CVE-2021-36855.htmlWed, 17 Jun 2026 03:59:31 +0000MEDIUM 6.1: Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro plugin <= 1.1.4 at WordPress.CVE-2021-36854: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress.https://patchthecve.com/cve/CVE-2021-36854.htmlhttps://patchthecve.com/cve/CVE-2021-36854.htmlWed, 17 Jun 2026 03:59:31 +0000MEDIUM 5.4: Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Booking Ultra Pro plugin <= 1.1.4 at WordPress.