Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Booking Calendar - Cross-Site Scripting (XSS) (CVE-2017-18555)
The booking-sms plugin before 1.1.0 for WordPress has XSS.
PLUGIN
Booking Calendar
CVE-2017-18555
Risk Score
Threat Entry
Updated 2026-06-17
Booking Calendar - SQL Injection (CVE-2018-20556)
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter.
PLUGIN
Booking Calendar
CVE-2018-20556
Risk Score
Threat Entry
Updated 2026-06-17
Booking Calendar - Security Vulnerability (CVE-2018-10363)
An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices.
PLUGIN
Booking Calendar
CVE-2018-10363
Risk Score
Threat Entry
Updated 2026-06-17
Booking Calendar - Cross-Site Request Forgery (CSRF) (CVE-2018-5673)
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. CSRF exists via wp-admin/admin.php.
PLUGIN
Booking Calendar
CVE-2018-5673
Risk Score
Threat Entry
Updated 2026-06-17
Booking Calendar - Cross-Site Scripting (XSS) (CVE-2018-5672)
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php form_field5[label] parameter.
PLUGIN
Booking Calendar
CVE-2018-5672
Risk Score
Threat Entry
Updated 2026-06-17
Booking Calendar - Cross-Site Scripting (XSS) (CVE-2018-5671)
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php extra_field1[items][field_item1][price_percent] parameter.
PLUGIN
Booking Calendar
CVE-2018-5671
Risk Score
Threat Entry
Updated 2026-06-17
Booking Calendar - Cross-Site Scripting (XSS) (CVE-2018-5670)
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php sale_conditions[count][] parameter.
PLUGIN
Booking Calendar
CVE-2018-5670
Risk Score