Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Booking Calendar Contact Form — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Booking Calendar Contact Form, with AI-generated Chinese analysis, references, and POCs.

Vendor: CodePeople

CVE IDTitleCVSSSeverityPublished
CVE-2016-20068 WordPress Booking Calendar Contact Form 1.0.23 SQL Injection CWE-89 8.2 High2026-06-15
CVE-2016-20070 WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS CWE-79 6.4 Medium2026-06-15
CVE-2016-20069 WordPress Booking Calendar Contact Form 1.0.23 SQL Injection CWE-89 8.2 High2026-06-15
CVE-2026-6810 Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover CWE-639 5.3 Medium2026-04-24
CVE-2025-13318 Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter CWE-862 5.3 Medium2025-11-22
CVE-2025-48231 WordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium2025-07-04
CVE-2025-24723 WordPress Booking Calendar Contact Form Plugin <= 1.2.55 - Stored Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium2025-01-24
CVE-2023-25037 WordPress Booking Calendar Contact Form plugin <= 1.2.34 - Broken Access Control vulnerability CWE-862 4.3 Medium2024-12-09
CVE-2023-36384 WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-07-18

All 9 known CVE vulnerabilities affecting Booking Calendar Contact Form with full Chinese analysis, references, and POCs where available.