How many wpdevart booking calendar CVEs are in CISA KEV?

None of wpdevart booking calendar's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for wpdevart booking calendar vulnerabilities?

Yes — 1 of wpdevart booking calendar's CVEs have a known public exploit.

Which versions of wpdevart booking calendar are affected?

14 distinct wpdevart booking calendar versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wpdevart booking calendar CVEs?

wpdevart booking calendar's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-472 (External Control of Assumed-Immutable Web Parameter).

How many critical wpdevart booking calendar vulnerabilities are there?

wpdevart booking calendar has 3 critical and 3 high-severity CVEs.

What is the average severity of wpdevart booking calendar CVEs?

The average CVSS base score across wpdevart booking calendar's scored CVEs is 7.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wpdevart

9 CVEs

wpdevart booking calendar Vulnerabilities

Name: wpdevart booking calendar vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for booking calendar by wpdevart.

9

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.9

Avg CVSS

2018–2024

Last updated December 24, 2024

Overview

wpdevart booking calendar has 9 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wpdevart booking calendar, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wpdevart booking calendar's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High3

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wpdevart booking calendar's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of wpdevart booking calendar's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every wpdevart booking calendar version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.2.43 CVEs
< 3.2.01 CVE
< 3.2.21 CVE
< 3.2.81 CVE
<= 3.2.151 CVE
<= 3.2.31 CVE
<= 3.2.71 CVE
2.2.2 <= v <= 2.2.21 CVE

Fixed in

3.2.43 CVEs
> 3.2.151 CVE
> 3.2.71 CVE
3.2.01 CVE
3.2.21 CVE
3.2.81 CVE

Find a version

9 CVEs

Sort

Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection
CVE-2024-10856
Patch
CWE-89
Medium · CVSS 6.5
EPSS 0.5% (39th pct)2024-12-24
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerability
CVE-2023-24407
Patch
CWE-862
High · CVSS 8.8
EPSS 0.5% (39th pct)2024-12-09
Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
CVE-2024-9504
Patch
CWE-434
High · CVSS 7.2
EPSS 0.5% (38th pct)2024-11-26
WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability
CVE-2023-24373
Patch
CWE-472
Critical · CVSS 9.8
EPSS 0.4% (28th pct)2024-06-03
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection
CVE-2022-47428
Patch
CWE-89
Critical · CVSS 9.8
EPSS 0.7% (49th pct)2023-11-06
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-47438
Patch
CWE-79
Medium · CVSS 5.9
EPSS 0.4% (31th pct)2023-03-29
WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-24388
Patch
CWE-352
Medium · CVSS 5.4
EPSS 0.2% (14th pct)2023-02-17
Critical vulnerability · 2022-12-12
CVE-2022-3982
Public exploit
Patch
Critical · CVSS 9.8
EPSS 4.5% (91th pct)2022-12-12
High vulnerability · 2018-06-13
CVE-2018-10363
High · CVSS 7.5
EPSS 1.4% (69th pct)2018-06-13

Common weakness types

The CWE weakness categories most often found in wpdevart booking calendar CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many wpdevart booking calendar CVEs were published each year.

2018

1

2022

1

2023

3

2024

4

Other wpdevart products

Browse vulnerabilities for other products by wpdevart.

Booking calendar, Appointment Booking System12 CVEs gallery7 CVEs Responsive Image Gallery, Gallery Album5 CVEs coming soon and maintenance mode4 CVEs Organization chart4 CVEs Gallery – Image and Video Gallery with Thumbnails3 CVEs pricing table builder3 CVEs contact form builder2 CVEs

All wpdevart vulnerabilities

Frequently asked questions

Common questions about wpdevart booking calendar vulnerabilities.

How many CVEs does wpdevart booking calendar have?: wpdevart booking calendar has 9 published CVE records since 2018.
How many wpdevart booking calendar CVEs are in CISA KEV?: None of wpdevart booking calendar's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wpdevart booking calendar vulnerabilities?: Yes — 1 of wpdevart booking calendar's CVEs have a known public exploit.
Which versions of wpdevart booking calendar are affected?: 14 distinct wpdevart booking calendar versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wpdevart booking calendar CVEs?: wpdevart booking calendar's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-472 (External Control of Assumed-Immutable Web Parameter).
How many critical wpdevart booking calendar vulnerabilities are there?: wpdevart booking calendar has 3 critical and 3 high-severity CVEs.
What is the average severity of wpdevart booking calendar CVEs?: The average CVSS base score across wpdevart booking calendar's scored CVEs is 7.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wpdevart booking calendar vulnerabilities

Monitor new wpdevart booking calendar vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing