WordPress Plugin Vulnerabilities

Booking Calendar <= 4.1.5 - Cross-Site Request Forgery (CSRF)

Description

The Booking Calendar WordPress plugin was affected by a Cross-Site Request Forgery (CSRF) security vulnerability.

Affects Plugins

Plugin icon
booking
Fixed in 4.1.6

References

Exploitdb
27399
URL
https://packetstormsecurity.com/files/#122691/
URL
http://wpbookingcalendar.com/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
f690bc9c-9c42-4a7b-8452-00b870443c58

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-04-09
Title
WPJobBoard < 5.11.1 - Cross-Site Request Forgery
Published
2024-04-11
Title
Novelist < 1.2.3 - Cross-Site Request Forgery
Published
2023-11-07
Title
Plugin Name: Device Theme Switcher <= 3.0.2 - Cross-Site Request Forgery
Published
2024-12-12
Title
Social Media Sharing <= 1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2024-08-16
Title
WP Data Access < 5.5.9 - Cross-Site Request Forgery