Vulnerabilities in wpdevelop
30 resultsCVE-2026-1431MEDIUMBooking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details ExposureEPSS 0.3%CVE-2026-59558HIGHWordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-2230MEDIUMBooking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings ModificationEPSS 0.2%CVE-2026-18496MEDIUMBooking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX ActionEPSS 0.2%CVE-2025-12804MEDIUMBooking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar ShortcodeEPSS 0.2%CVE-2025-9346MEDIUMBooking Calendar <= 10.14.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-64381MEDIUMWordPress Booking Calendar plugin <= 10.14.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-64275MEDIUMWordPress Booking Manager plugin <= 2.1.17 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-39601LOWWordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerabilityEPSS 0.2%CVE-2026-42751MEDIUMWordPress Booking Manager plugin <= 2.1.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%