5.4
Medium
CVE-2023-24388 Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System…
Description
Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions affects plugin forms actions (create, duplicate, edit, delete).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Booking calendar, Appointment Booking System 3.2 | earliest → 3.2.3 | No fix stated |
Other CVEs of Booking calendar, Appointment Booking System
The 14 CVEs of Booking calendar, Appointment Booking System →
CVE-2026-73395
Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking…
6.5
Medium
CVE-2026-8840
The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to authorization bypass in all…
5.3
Medium
CVE-2026-57778
Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows…
5.3
Medium
CVE-2026-15289
The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via…
5.9
Medium