Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Booking calendar, Appointment Booking System Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2026-73395`WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR) vulnerability	Exploitation statusNot known exploited	FixYes	Published08/18/2026	SeverityMedium
`CVE-2026-8840`Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX Action	Exploitation statusNot known exploited	FixYes	Published08/15/2026	SeverityMedium
`CVE-2026-57778`WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Published07/13/2026	SeverityMedium
`CVE-2026-15289`Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'	Exploitation statusNot known exploited	FixYes	Published07/10/2026	SeverityMedium
`CVE-2026-25435`WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Cross Site Scripting (XSS) vulnerability	Exploitation statusNot known exploited	FixYes	Published03/25/2026	SeverityHigh
`CVE-2025-67574`WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Published12/09/2025	SeverityMedium
`CVE-2024-12077`Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'	Exploitation statusNot known exploited	FixYes	Published01/07/2025	SeverityMedium
`CVE-2024-10856`Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection	Exploitation statusNot known exploited	FixYes	Published12/24/2024	SeverityMedium
`CVE-2023-24407`WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerability	Exploitation statusNot known exploited	FixYes	Published12/09/2024	SeverityMedium
`CVE-2024-9504`Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload	Exploitation statusNot known exploited	FixYes	Published11/26/2024	SeverityHigh
`CVE-2023-24373`WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerability	Exploitation statusNot known exploited	FixYes	Published06/03/2024	SeverityLow
`CVE-2022-47428`WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection	Exploitation statusNot known exploited	FixYes	Published11/06/2023	SeverityCritical
`CVE-2022-47438`WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)	Exploitation statusNot known exploited	FixYes	Published03/29/2023	SeverityMedium
`CVE-2023-24388`WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)	Exploitation statusNot known exploited	FixYes	Published02/17/2023	SeverityMedium

14 / 14 Results

All vulnerabilities loaded

Security vulnerabilities in Booking calendar, Appointment Booking System

Booking calendar, Appointment Booking System

Verify to analyze this security profile

How many security vulnerabilities does Booking calendar, Appointment Booking System have?

Does the latest Booking calendar, Appointment Booking System version have known vulnerabilities?

Run an in-depth assessment with complete web risk management