WPdevart Booking calendar, Appointment Booking System

• CVE-2026-73395 Medium 6.5 WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability 0.3%
• CVE-2026-8840 Medium 5.3 Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX Action 0.5%
• CVE-2026-57778 Medium 5.3 WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerability 0.3%
• CVE-2026-15289 Medium 5.9 Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id' 0.4%
• CVE-2026-25435 High 7.1 WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-67574 Medium 5.3 WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerability 0.3%
• CVE-2024-12077 Medium 6.1 Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id' 0.4%
• CVE-2024-10856 Medium 6.5 Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection 0.5%
• CVE-2023-24407 Medium 5.0 WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerability 0.5%
• CVE-2024-9504 High 7.2 Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload 0.5%
• CVE-2023-24373 Low 3.7 WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability 0.4%
• CVE-2022-47428 Medium 6.7 WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection 0.7%
• CVE-2022-47438 Medium 5.9 WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS) 0.4%
• CVE-2023-24388 Medium 5.4 WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%