CodePeople Booking Calendar Contact Form

• CVE-2026-6810 Medium 5.3 Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover 0.3%
• CVE-2025-13318 Medium 5.3 Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter 0.3%
• CVE-2025-48231 Medium 6.5 WordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-24723 Medium 5.9 WordPress Booking Calendar Contact Form Plugin <= 1.2.55 - Stored Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2023-25037 Medium 4.3 WordPress Booking Calendar Contact Form plugin <= 1.2.34 - Broken Access Control vulnerability 0.6%
• CVE-2023-36384 High 7.1 WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS) 0.4%