WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
booking
Published
2025-02-11
Title
WP Booking Calendar < 10.10.1 - Unauthenticated Post-Confirmation Booking Manipulation
Slug
booking
Published
2025-05-16
Title
Booking Calendar < 10.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcode
Slug
booking
Published
2025-08-27
Title
Booking Calendar < 10.14.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
booking
Published
2025-11-13
Title
Booking Calendar < 10.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
booking
Published
2025-12-04
Title
Booking Calendar < 10.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcode
Slug
booking
Published
2025-12-15
Title
Booking Calendar < 10.14.9 - Unauthenticated SQL Injection via dates_to_check
Slug
booking
Published
2026-01-08
Title
Booking Calendar < 10.14.11 - Unauthenticated Sensitive Information Exposure
Slug
booking
Published
2026-01-15
Title
Booking Calendar < 10.14.12 - Missing Authorization to Sensitive Information Exposure
Slug
booking
Published
2026-01-30
Title
Booking Calendar < 10.14.14 - Missing Authorization to Unauthenticated Booking Details Exposure
Slug
booking
Published
2026-02-17
Title
Booking Calendar < 10.14.15 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings Modification
Slug
booking
Published
2026-02-14
Title
Booking Calendar < 10.14.16 - Authenticated (Editor+) SQL Injection
Slug
booking-activities
Published
2024-03-28
Title
Booking Activities < 1.15.20 - Reflected Cross-Site Scripting
Slug
booking-activities
Published
2026-01-20
Title
Booking Activities < 1.16.45 - Unauthenticated Privilege Escalation
Slug
booking-activities
Published
2026-04-13
Title
Booking Activities < 1.17.0 - Missing Authorization
Slug
booking-and-rental-manager-for-woocommerce
Published
2023-06-13
Title
Booking and Rental Manager < 1.2.2 - Admin+ Stored XSS
Slug
booking-and-rental-manager-for-woocommerce
Published
2025-01-10
Title
Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration – WpRently | WordPress plugin < 2.2.2 - Reflected Cross-Site Scripting
Slug
booking-and-rental-manager-for-woocommerce
Published
2025-01-15
Title
Booking and Rental Manager for Bike < 2.2.2 - Missing Authorization
Slug
booking-and-rental-manager-for-woocommerce
Published
2025-04-11
Title
Booking and Rental Manager < 2.2.9 - Authenticated (Contributor+) Local File Inclusion
Slug
booking-and-rental-manager-for-woocommerce
Published
2025-02-23
Title
Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment < 2.2.7 - Authenticated (Contributor+) PHP Object Injection
Slug
booking-and-rental-manager-for-woocommerce
Published
2025-04-17
Title
Booking and Rental Manager < 2.2.9 - Missing Authorization
Slug
booking-and-rental-manager-for-woocommerce
Published
2025-04-18
Title
Booking and Rental Manager < 2.3.7 - Missing Authorization
Slug
booking-and-rental-manager-for-woocommerce
Published
2025-05-22
Title
Booking and Rental Manager < 2.3.9 - Missing Authorization
Slug
booking-and-rental-manager-for-woocommerce
Published
2025-11-01
Title
Booking and Rental Manager < 2.5.4 - Unauthenticated Stored Cross-Site Scripting
Slug
booking-and-rental-manager-for-woocommerce
Published
2025-09-20
Title
Booking and Rental Manager < 2.5.5 - Authenticated (Contributor+) PHP Object Injection
Slug
booking-and-rental-manager-for-woocommerce
Published
2026-02-09
Title
Booking and Rental Manager < 2.6.0 - Authenticated (Contributor+) PHP Object Injection