Booking Calendar

Güvenlik açıkları

• CVE-2024-1207kimlik doğrulamasız≤ 9.9

  Booking Calendar <= 9.9 - Unauthenticated SQL Injection

  Kritik 9.8

• CVE-2026-32358yüksek yetki≤ 10.14.15

  WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2023-23991yüksek yetki≤ 9.4.3

  WordPress Booking Calendar plugin <= 9.4.3 - SQL Injection

  Yüksek 7.6

• CVE-2025-14383kimlik doğrulamasız≤ 10.14.8

  Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_check

  Yüksek 7.5

• CVE-2026-92619editör+≤ 11.8.2

  Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter

  Yüksek 7.2

• CVE-2026-59558kimlik doğrulamasız · tıklama gerekir≤ 11.4.2

  WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2025-64381giriş gerekir≤ 10.14.7

  WordPress Booking Calendar plugin <= 10.14.7 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-12804katılımcı+≤ 10.14.6

  Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcode

  Orta 6.4

• CVE-2025-9346katılımcı+≤ 10.14.1

  Booking Calendar <= 10.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2026-93655kimlik doğrulamasız · tıklama gerekir≤ 11.8.3

  Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter

  Orta 6.1

• CVE-2026-92561kimlik doğrulamasız · tıklama gerekir≤ 11.8.2

  Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameter

  Orta 6.1

• CVE-2024-8274kimlik doğrulamasız · tıklama gerekir≤ 10.5

  WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting

  Orta 6.1

• CVE-2023-51520giriş gerekir→ 9.7.4

  WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2025-4669katılımcı+≤ 10.11.1

  Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode

  Orta 5.4

• CVE-2024-13323katılımcı+≤ 10.9.2

  Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode

  Orta 5.4

• CVE-2024-6930katılımcı+≤ 10.2.1

  WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcode

  Orta 5.4

• CVE-2026-74002kimlik doğrulamasız≤ 11.7

  WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2026-1431kimlik doğrulamasız≤ 10.14.13

  Booking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposure

  Orta 5.3

• CVE-2025-14146kimlik doğrulamasız≤ 10.14.10

  Booking Calendar <= 10.14.10 - Unauthenticated Sensitive Information Exposure

  Orta 5.3

• CVE-2024-13821kimlik doğrulamasız≤ 10.10

  WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulation

  Orta 5.3

• CVE-2024-9306yönetici≤ 10.6

  WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scripting

  Orta 4.8

• CVE-2022-33177kimlik doğrulamasız · tıklama gerekir≤ 9.2.1

  WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity

  Orta 4.3

• CVE-2026-2230abone+≤ 10.14.14

  Booking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings Modification

  Orta 4.3

• CVE-2025-14982abone+≤ 10.14.11

  Booking Calendar <= 10.14.11 - Missing Authorization to Sensitive Information Exposure

  Orta 4.3

• CVE-2026-39601kimlik doğrulamasız≤ 11.8.4

  WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerability

  Düşük 3.7