agentprime: wpdevart-booking-calendar-appointment-booking-systemEvery new CVE for wpdevart-booking-calendar-appointment-booking-system.https://agentprime.io/CVE-2026-73395: WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerabilityhttps://agentprime.io/advisories/CVE-2026-73395/https://agentprime.io/advisories/CVE-2026-73395/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 14:00:32 GMTCVECVE-2026-8840: Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX Actionhttps://agentprime.io/advisories/CVE-2026-8840/https://agentprime.io/advisories/CVE-2026-8840/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 15 Aug 2026 02:26:16 GMTCVECVE-2026-57778: WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-57778/https://agentprime.io/advisories/CVE-2026-57778/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 08:41:25 GMTCVECVE-2026-15289: Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'https://agentprime.io/advisories/CVE-2026-15289/https://agentprime.io/advisories/CVE-2026-15289/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 04:31:23 GMTCVECVE-2026-25435: WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2026-25435/https://agentprime.io/advisories/CVE-2026-25435/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Mar 2026 16:14:49 GMTCVECVE-2025-67574: WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2025-67574/https://agentprime.io/advisories/CVE-2025-67574/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 14:14:13 GMTCVECVE-2024-12077: Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'https://agentprime.io/advisories/CVE-2024-12077/https://agentprime.io/advisories/CVE-2024-12077/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jan 2025 07:22:33 GMTCVECVE-2024-10856: Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injectionhttps://agentprime.io/advisories/CVE-2024-10856/https://agentprime.io/advisories/CVE-2024-10856/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Dec 2024 11:09:50 GMTCVECVE-2023-24407: WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2023-24407/https://agentprime.io/advisories/CVE-2023-24407/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Dec 2024 11:31:40 GMTCVECVE-2024-9504: Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Uploadhttps://agentprime.io/advisories/CVE-2024-9504/https://agentprime.io/advisories/CVE-2024-9504/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Nov 2024 07:31:31 GMTCVECVE-2023-24373: WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerabilityhttps://agentprime.io/advisories/CVE-2023-24373/https://agentprime.io/advisories/CVE-2023-24373/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Jun 2024 21:35:58 GMTCVECVE-2022-47428: WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injectionhttps://agentprime.io/advisories/CVE-2022-47428/https://agentprime.io/advisories/CVE-2022-47428/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Nov 2023 07:36:32 GMTCVECVE-2022-47438: WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)https://agentprime.io/advisories/CVE-2022-47438/https://agentprime.io/advisories/CVE-2022-47438/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 29 Mar 2023 12:29:03 GMTCVECVE-2023-24388: WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)https://agentprime.io/advisories/CVE-2023-24388/https://agentprime.io/advisories/CVE-2023-24388/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Feb 2023 14:25:11 GMTCVE