agentprime: wpdevelop-booking-calendar

agentprime: wpdevelop-booking-calendarEvery new CVE for wpdevelop-booking-calendar.https://agentprime.io/CVE-2026-18496: Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Actionhttps://agentprime.io/advisories/CVE-2026-18496/https://agentprime.io/advisories/CVE-2026-18496/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:30:55 GMTCVECVE-2026-39601: WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerabilityhttps://agentprime.io/advisories/CVE-2026-39601/https://agentprime.io/advisories/CVE-2026-39601/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 14:49:13 GMTCVECVE-2026-93655: Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameterhttps://agentprime.io/advisories/CVE-2026-93655/https://agentprime.io/advisories/CVE-2026-93655/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 05:30:43 GMTCVECVE-2026-92561: Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameterhttps://agentprime.io/advisories/CVE-2026-92561/https://agentprime.io/advisories/CVE-2026-92561/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 06:38:56 GMTCVECVE-2026-92619: Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameterhttps://agentprime.io/advisories/CVE-2026-92619/https://agentprime.io/advisories/CVE-2026-92619/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 06:38:54 GMTCVECVE-2026-74002: WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-74002/https://agentprime.io/advisories/CVE-2026-74002/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 13:24:53 GMTCVECVE-2026-59558: WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2026-59558/https://agentprime.io/advisories/CVE-2026-59558/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 13:59:14 GMTCVECVE-2026-32358: WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-32358/https://agentprime.io/advisories/CVE-2026-32358/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 11:42:03 GMTCVECVE-2026-2230: Booking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings Modificationhttps://agentprime.io/advisories/CVE-2026-2230/https://agentprime.io/advisories/CVE-2026-2230/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Feb 2026 16:28:14 GMTCVECVE-2026-1431: Booking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposurehttps://agentprime.io/advisories/CVE-2026-1431/https://agentprime.io/advisories/CVE-2026-1431/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Jan 2026 04:35:14 GMTCVECVE-2025-14982: Booking Calendar <= 10.14.11 - Missing Authorization to Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2025-14982/https://agentprime.io/advisories/CVE-2025-14982/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Jan 2026 04:44:33 GMTCVECVE-2025-14146: Booking Calendar <= 10.14.10 - Unauthenticated Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2025-14146/https://agentprime.io/advisories/CVE-2025-14146/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jan 2026 07:22:09 GMTCVECVE-2025-14383: Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_checkhttps://agentprime.io/advisories/CVE-2025-14383/https://agentprime.io/advisories/CVE-2025-14383/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Dec 2025 14:25:11 GMTCVECVE-2025-12804: Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcodehttps://agentprime.io/advisories/CVE-2025-12804/https://agentprime.io/advisories/CVE-2025-12804/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 01:55:22 GMTCVECVE-2025-64381: WordPress Booking Calendar plugin <= 10.14.7 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2025-64381/https://agentprime.io/advisories/CVE-2025-64381/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Nov 2025 09:24:35 GMTCVECVE-2025-9346: Booking Calendar <= 10.14.1 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-9346/https://agentprime.io/advisories/CVE-2025-9346/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Aug 2025 03:42:44 GMTCVECVE-2025-4669: Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcodehttps://agentprime.io/advisories/CVE-2025-4669/https://agentprime.io/advisories/CVE-2025-4669/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 May 2025 11:17:17 GMTCVECVE-2024-13821: WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulationhttps://agentprime.io/advisories/CVE-2024-13821/https://agentprime.io/advisories/CVE-2024-13821/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Feb 2025 07:35:38 GMTCVECVE-2024-13323: Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcodehttps://agentprime.io/advisories/CVE-2024-13323/https://agentprime.io/advisories/CVE-2024-13323/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 05:24:39 GMTCVECVE-2024-9306: WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-9306/https://agentprime.io/advisories/CVE-2024-9306/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Oct 2024 06:48:40 GMTCVECVE-2024-8274: WP Booking Calendar <= 10.5 - Reflected Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-8274/https://agentprime.io/advisories/CVE-2024-8274/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Aug 2024 09:29:48 GMTCVECVE-2024-6930: WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcodehttps://agentprime.io/advisories/CVE-2024-6930/https://agentprime.io/advisories/CVE-2024-6930/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Jul 2024 07:31:48 GMTCVECVE-2024-1207: Booking Calendar <= 9.9 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-1207/https://agentprime.io/advisories/CVE-2024-1207/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Feb 2024 08:32:07 GMTCVEcriticalCVE-2022-1463: Booking Calendar <= 9.1 - PHP Object Injection via Shortcodehttps://agentprime.io/advisories/CVE-2022-1463/https://agentprime.io/advisories/CVE-2022-1463/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 May 2022 19:37:41 GMTCVECVE-2017-2151: wpdevelop Booking Calendar: Cross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows…https://agentprime.io/advisories/CVE-2017-2151/https://agentprime.io/advisories/CVE-2017-2151/Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Apr 2017 16:00:00 GMTCVECVE-2017-2150: wpdevelop Booking Calendar: Directory traversal vulnerability in Booking Calendar version 7.0 and earlier allows…https://agentprime.io/advisories/CVE-2017-2150/https://agentprime.io/advisories/CVE-2017-2150/Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Apr 2017 16:00:00 GMTCVE