Wpdevelop / Oplugins vulnerabilities
2 vulnerabilities
Known vulnerabilities in Wpdevelop / Oplugins products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Booking Calendar1 vulnerabilities
- WP Booking Calendar1 vulnerabilities
MediumCVE-2023-51520wordpress · booking +2 moreWordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPdevelop / Oplugins WP Booking Calendar allows Stored XSS.This issue affects WP Booking Calendar: from n/a before 9.7.4.EPSS0.33%HighCVE-2023-23991wordpress · booking +1 moreWordPress Booking Calendar plugin <= 9.4.3 - SQL InjectionImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdevelop / Oplugins Booking Calendar allows SQL Injection.This issue affects Booking Calendar: from n/a through 9.4.3.EPSS0.52%