vikappointments_services_booking_calendar vulnerabilities

CVEs whose affected-version data names the vikappointments_services_booking_calendar package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-87115Critical· 9.1

today

The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the extract function in all versions up to, and including, 1.2.21

The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the extract function in all versions up to, and including, 1.2.21. This makes it poss…

▾ Midnighte4jvikwp · VikAppointments Services Booking Calendarvia NVD