Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Booking Calendar Contact Form — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Booking Calendar Contact Form, with AI-generated Chinese analysis, references, and POCs.

Vendor: CodePeople

CVE IDTitleCVSSSeverityPublished
CVE-2026-6810 Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover CWE-639 5.3 Medium2026-04-24
CVE-2025-13318 Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter CWE-862 5.3 Medium2025-11-22
CVE-2025-48231 WordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium2025-07-04
CVE-2025-24723 WordPress Booking Calendar Contact Form Plugin <= 1.2.55 - Stored Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium2025-01-24
CVE-2023-25037 WordPress Booking Calendar Contact Form plugin <= 1.2.34 - Broken Access Control vulnerability CWE-862 4.3 Medium2024-12-09
CVE-2023-36384 WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-07-18

All 6 known CVE vulnerabilities affecting Booking Calendar Contact Form with full Chinese analysis, references, and POCs where available.