Appointment Booking Calendar

Vulnerabilities 16Slug appointment-booking-calendarLatest version 1.3.99WordPress.org →

Minimum safe version

1.3.97

Update to 1.3.97 or later to address 16 fixable vulnerabilities

Latest available1.3.99 ✓

Medium 5.3

2025-11-22< 1.3.97

CVE-2025-13317

CVE EUVD Wordfence

Medium 5.4

2025-11-15< 1.3.96

Appointment Booking Calendar <= 1.3.95 - Missing Authorization

Wordfence CVE

High 8.8

2025-04-22< 1.3.93

CVE-2025-46241

CVE Wordfence

Critical 9.8

2025-04-22< 1.3.93

CVE-2025-46247

CVE Patchstack Wordfence

High 8.8

2024-03-20< 1.3.83

CVE-2024-0856

CVE Wordfence Patchstack WPScan

N/A

2016-01-26< 1.2.25

Appointment Booking Calendar <= 1.2.24 - Cross-Site Scripting

Wordfence

N/A

2016-01-27< 1.2.25

Appointment Booking Calendar <= 1.2.24 - SQL Injection

Wordfence

Medium 4.3

2022-11-18< 1.3.70

CVE-2022-43482

CVE Patchstack Wordfence WPScan

N/A

< 1.1.25

Appointment Booking Calendar < 1.1.25 - Unauthenticated SQL Injection

WPScan

N/A

2019-07-07< 1.3.19

WordPress Appointment Booking Calendar plugin <= 1.3.18 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Patchstack

N/A

2015-09-29< 1.1.8

CVE-2015-7320

CVE Wordfence Patchstack

N/A

2015-09-29< 1.1.8

CVE-2015-7319

CVE Wordfence Patchstack WPScan

Medium 6.1

2019-08-09< 1.3.19

CVE-2019-14791

CVE Wordfence WPScan

Critical 9.8

2019-08-22< 1.1.24

CVE-2016-10916

CVE Wordfence WPScan

High 7.8

2020-03-12< 1.3.35

WordPress Appointment Booking Calendar <= 1.3.34 - CSV Injection vulnerability

Patchstack CVE Wordfence WPScan

Medium 4.8

2020-03-05< 1.3.35

WordPress Appointment Booking Calendar plugin <= 1.3.34 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Patchstack CVE Wordfence WPScan