Known vulnerabilities in codepeople Booking Calendar Contact Form
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-6810 | The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions… | 5.3 Medium | Apr 24, 2026 |
| CVE-2025-13318 | The Booking Calendar Contact Form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and… | 5.3 Medium | Nov 22, 2025 |
| CVE-2025-48231 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Booking… | 6.5 Medium | Jul 4, 2025 |
| CVE-2025-24723 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Booking… | 5.9 Medium | Jan 24, 2025 |
| CVE-2023-25037 | Missing Authorization vulnerability in CodePeople Booking Calendar Contact Form allows Exploiting Incorrectly Configured… | 4.3 Medium | Dec 9, 2024 |
| CVE-2023-36384 | Unauth | 7.1 High | Jul 18, 2023 |
Other codepeople products
Calculated Fields Form 12
WP Time Slots Booking Form 11
Contact Form Email 8
Appointment Booking Calendar 7
CP Multi View Event Calendar 5
Appointment Hour Booking – Booking Calendar 5
Appointment Hour Booking 4
CP Polls 4
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More 3
CP Contact Form with PayPal 3
Appointment Hour Booking – WordPress Booking Plugin 3
Music Player for WooCommerce 3