How many wpbookingcalendar wp booking calendar CVEs are in CISA KEV?

None of wpbookingcalendar wp booking calendar's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of wpbookingcalendar wp booking calendar are affected?

11 distinct wpbookingcalendar wp booking calendar versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wpbookingcalendar wp booking calendar CVEs?

wpbookingcalendar wp booking calendar's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of wpbookingcalendar wp booking calendar CVEs?

The average CVSS base score across wpbookingcalendar wp booking calendar's scored CVEs is 5.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wpbookingcalendar

6 CVEs

wpbookingcalendar wp booking calendar Vulnerabilities

Name: wpbookingcalendar wp booking calendar vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for wp booking calendar by wpbookingcalendar.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

5.5

Avg CVSS

2024–2025

Last updated May 17, 2025

Overview

wpbookingcalendar wp booking calendar has 6 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 5.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wpbookingcalendar wp booking calendar, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wpbookingcalendar wp booking calendar's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wpbookingcalendar wp booking calendar's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of wpbookingcalendar wp booking calendar's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every wpbookingcalendar wp booking calendar version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 10.5.11 CVE
< 10.6.11 CVE
< 10.6.31 CVE
< 10.6.51 CVE
< 10.9.31 CVE
<= 10.11.11 CVE

Fixed in

10.5.11 CVE
10.6.11 CVE
10.6.31 CVE
10.6.51 CVE
10.9.31 CVE

Find a version

6 CVEs

Sort

Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode
CVE-2025-4669
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (24th pct)2025-05-17
Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcode
CVE-2024-13323
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.4% (31th pct)2025-01-14
Medium vulnerability · 2024-12-03
CVE-2024-10893
Public exploit
Patch
Medium · CVSS 4.8
EPSS 0.3% (23th pct)2024-12-03
Medium vulnerability · 2024-11-07
CVE-2024-10027
Public exploit
Patch
Medium · CVSS 4.8
EPSS 0.3% (27th pct)2024-11-07
WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2024-9306
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.3% (23th pct)2024-10-04
WP Booking Calendar <= 10.5 - Reflected Cross-Site Scripting
CVE-2024-8274
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.5% (38th pct)2024-08-30

Common weakness types

The CWE weakness categories most often found in wpbookingcalendar wp booking calendar CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs

Disclosure activity by year

How many wpbookingcalendar wp booking calendar CVEs were published each year.

2024

4

2025

2

Other wpbookingcalendar products

Browse vulnerabilities for other products by wpbookingcalendar.

booking calendar6 CVEs secure downloads1 CVEs

All wpbookingcalendar vulnerabilities

Frequently asked questions

Common questions about wpbookingcalendar wp booking calendar vulnerabilities.

How many CVEs does wpbookingcalendar wp booking calendar have?: wpbookingcalendar wp booking calendar has 6 published CVE records since 2024.
How many wpbookingcalendar wp booking calendar CVEs are in CISA KEV?: None of wpbookingcalendar wp booking calendar's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wpbookingcalendar wp booking calendar vulnerabilities?: Yes — 2 of wpbookingcalendar wp booking calendar's CVEs have a known public exploit.
Which versions of wpbookingcalendar wp booking calendar are affected?: 11 distinct wpbookingcalendar wp booking calendar versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wpbookingcalendar wp booking calendar CVEs?: wpbookingcalendar wp booking calendar's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of wpbookingcalendar wp booking calendar CVEs?: The average CVSS base score across wpbookingcalendar wp booking calendar's scored CVEs is 5.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wpbookingcalendar wp booking calendar vulnerabilities

Monitor new wpbookingcalendar wp booking calendar vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing