Known vulnerabilities in StellarWP Bookit — Booking & Appointment Calendar
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-12633 | The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of… | 7.5 High | Nov 12, 2025 |
| CVE-2022-4974 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… | 6.3 Medium | Oct 16, 2024 |
| CVE-2023-2834 | The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7 | 9.8 Critical | Jun 30, 2023 |
Other StellarWP products
GiveWP – Donation Plugin and Fundraising Platform 34
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor 30
The Events Calendar 21
GiveWP 10
Event Tickets and Registration 8
Membership Plugin – Restrict Content 7
LearnDash LMS 7
WPComplete 4
Kadence WooCommerce Email Designer 4
Gutenberg Blocks by Kadence Blocks 3
Event Tickets 3
Restrict Content 2