Booking calendar, Appointment Booking System

Vulnerabilities 22Slug booking-calendarLatest version 3.2.36WordPress.org →

Minimum safe version

3.2.31

Update to 3.2.31 or later to address 21 fixable vulnerabilities

Latest available3.2.36 ✓⚠ 1 vulnerability has no fix
High 7.1 Unfixed
2026-03-25≤ 3.2.36

CVE-2026-25435

CVEWordfence
Medium 5.3
2025-12-15< 3.2.31

Booking calendar, Appointment Booking System <= 3.2.30 - Missing Authorization

WordfenceCVE
N/A
2025-07-01< 3.2.18

Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'

Wordfence
N/A
< 3.2.12

Booking Calendar WpDevArt &lt; 3.2.12 - Admin+ SQLi

WPScan
N/A
< 3.2.9

Booking calendar, Appointment Booking System &lt; 3.2.9 - Multiple Authenticated(Editor+) SQL Injection

WPScan
N/A
2023-10-29< 3.2.12

Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection

Wordfence
N/A
2023-09-12< 3.2.9

Booking calendar, Appointment Booking System <= 3.2.8 - Multiple Authenticated(Editor+) SQL Injection

Wordfence
N/A
2018-01-22< 2.1.8

WordPress Booking calendar plugin <=2.1.7 - Multiple Cross-Site Scripting (XSS) vulnerabilities

Patchstack
High 8.8
2018-01-22< 2.1.8

WordPress Booking calendar plugin <=2.1.7 - Cross-Site Request Forgery (CSRF) vulnerability

PatchstackCVEWordfenceWPScan