5.0
Medium
CVE-2023-24407 Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting…
Description
Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Booking calendar, Appointment Booking System 3.2 | earliest → 3.2.3 | No fix stated |
Other CVEs of Booking calendar, Appointment Booking System
The 14 CVEs of Booking calendar, Appointment Booking System →
CVE-2026-73395
Unauthenticated Insecure Direct Object References (IDOR) in Booking calendar, Appointment Booking…
6.5
Medium
CVE-2026-8840
The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to authorization bypass in all…
5.3
Medium
CVE-2026-57778
Missing Authorization vulnerability in wpdevart Booking calendar, Appointment Booking System booking-calendar allows…
5.3
Medium
CVE-2026-15289
The Booking calendar, Appointment Booking System plugin for WordPress is vulnerable to time-based SQL Injection via…
5.9
Medium