Wpdevart
Wpdevart Booking Calendar: vulnerabilidades y CVE
Wpdevart Booking Calendar tiene 12 vulnerabilidades publicadas, 4 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses4
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-57778 | Media (5.3) | 0.29% | — | 13 jul 2026 | Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar,… |
| CVE-2026-15289 | Media (5.9) | 0.44% | — | 10 jul 2026 | The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via the ‘wpdevart_id’ parameter in all versions up to, and including, 3.2.17 due to insufficient escaping… |
| CVE-2026-25435 | Alta (7.1) | 0.25% | — | 25 mar 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Stored XSS.This issue affects Booking… |
| CVE-2025-67574 | Media (5.3) | 0.25% | — | 9 dic 2025 | Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar,… |
| CVE-2024-10856 | Media (6.5) | 0.49% | — | 24 dic 2024 | The Booking Calendar WpDevArt plugin is vulnerable to time-based, blind SQL injection via the `id` parameter in the “wpdevart_booking_calendar” shortcode in versions up to, and including, 3.2.19 due to insufficient… |
| CVE-2023-24407 | Alta (8.8) | 0.50% | — | 9 dic 2024 | Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, Appointment… |
| CVE-2023-24373 | Crítica (9.8) | 0.35% | — | 3 jun 2024 | External Control of Assumed-Immutable Web Parameter vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Manipulating Hidden Fields.This issue affects Booking calendar, Appointment Booking… |
| CVE-2022-47428 | Crítica (9.8) | 0.68% | — | 6 nov 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar,… |
| CVE-2022-47438 | Media (5.4) | 0.38% | — | 29 mar 2023 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions. |
| CVE-2023-24388 | Media (5.4) | 0.23% | — | 17 feb 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions affects plugin forms actions (create, duplicate, edit, delete). |
| CVE-2022-3982 | Crítica (9.8) | 4.5% | — | 12 dic 2022 | The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE |
| CVE-2018-10363 | Alta (7.5) | 1.4% | — | 13 jun 2018 | An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Wpdevart
Gallery · 7Coming Soon AND Maintenance Mode · 4Organization Chart · 4Pricing Table Builder · 3Countdown AND Countup, Woocommerce Sales Timer · 2Youtube Embed, Playlist AND Popup · 2Poll, Survey, Questionnaire AND Voting System · 2Responsive Vertical Icon Menu · 2Social Like BOX AND Page · 2Widget Countdown · 2Social Comments · 1Download Image AND Video Lightbox, Image Popup · 1