wp_booking_system_booking_calendar vulnerabilities
CVEs whose affected-version data names the wp_booking_system_booking_calendar package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111178Medium· 4.9WP Booking System <= 2.1.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied parame…
▾ Sunlitmurgroland · WP Booking System – Booking Calendarvia CVEORG
CVE-2026-107712Medium· 6.5The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied par…
The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1.0.1 due to insufficient escaping on the user supplied par…
▾ Sunlitmurgroland · WP Booking System – Booking CalendarEPSS 0.27%via NVD