Booking For Appointments And Events Calendar (Unknown) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-12. Vendor: Unknown.

CVEs of Booking For Appointments And Events Calendar

CVE-2026-77705 - CVSS 7.2 (high), 2026-09-12: The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is…
CVE-2026-77689 - CVSS 5.3 (medium), 2026-09-12: The Booking for Appointments and Events Calendar WordPress plugin before 9.8.1 does not verify that a payment was actually taken before recording a booking as…
CVE-2026-14215 - CVSS 6.5 (medium), 2026-09-02: The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not require authentication or a valid request token before running the…
CVE-2026-77704 - CVSS 2.7 (low), 2026-08-29: The Booking for Appointments and Events Calendar WordPress plugin before 2.4.9 does not check that a user holds the required capability before letting them…
CVE-2026-14216 - CVSS 6.5 (medium), 2026-08-26: The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification…
CVE-2026-14212 - CVSS 4.7 (medium), 2026-08-26: The Booking for Appointments and Events Calendar WordPress plugin before 9.8 does not verify that an authenticated employee (provider) owns the provider…
CVE-2026-14213 - CVSS 3.7 (low), 2026-08-13: The Booking for Appointments and Events Calendar WordPress plugin before 2.4.6 does not verify that an authenticated employee (provider) is assigned to the…
CVE-2026-14211 - CVSS 3.8 (low), 2026-08-10: The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an authenticated employee (provider) is related to the…
CVE-2026-14214 - CVSS 2.7 (low), 2026-08-01: The Booking for Appointments and Events Calendar WordPress plugin before 2.4.4 does not restrict which fields can be written through its customer import,…