Known vulnerabilities in the Booking for Appointments and Events Calendar plugin
25 security advisories have been published for the Booking for Appointments and Events Calendar plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-14311) MEDIUM
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-16582) MEDIUM
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-10148) MEDIUM
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-77705) HIGH
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-77689) MEDIUM
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-14215) MEDIUM
- Booking For Appointments And Events Calendar - Privilege Escalation (CVE-2026-9055) CRITICAL
- Booking for Appointments and Events Calendar - Broken Access Control (CVE-2026-77704) LOW
- Booking for Appointments and Events Calendar - Authentication Bypass (CVE-2026-6286) HIGH
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-14216) MEDIUM
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-14212) MEDIUM
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-14213) LOW
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-14211) LOW
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-14214) LOW
- Booking For Appointments And Events Calendar - SQL Injection (CVE-2026-14782) MEDIUM
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-6449) MEDIUM
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2026-5465) HIGH
- Booking for Appointments and Events Calendar - SQL Injection (CVE-2026-4668) MEDIUM
- Booking For Appointments And Events Calendar - Broken Access Control (CVE-2025-14720) MEDIUM
- Booking For Appointments And Events Calendar - SQL Injection (CVE-2025-12482) HIGH
- Booking for Appointments and Events Calendar - Broken Access Control (CVE-2024-6332) MEDIUM
- Booking for Appointments and Events Calendar - Security Vulnerability (CVE-2024-6552) MEDIUM
- Booking for Appointments and Events Calendar - Cross-Site Scripting (XSS) (CVE-2024-6225) MEDIUM
- Booking for Appointments and Events Calendar - Cross-Site Scripting (XSS) (CVE-2024-1484) MEDIUM
- Booking for Appointments and Events Calendar - Cross-Site Scripting (XSS) (CVE-2023-6808) MEDIUM