Pricing
Case studies
Login
Start trial
Booking Calendar Contact Form
codepeople
Developer
1.2.63
Latest version
600
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
11 patched
3 Mitigation rules
Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter vulnerability
<= 1.2.60
22/11/2025
Cross Site Scripting (XSS) Vulnerability
<= 1.2.58
30/06/2025
Stored Cross Site Scripting (XSS) vulnerability
<= 1.2.55
24/01/2025
Cross Site Scripting (XSS)
<= 1.2.40
22/06/2023
Broken Access Control vulnerability
<= 1.2.34
06/02/2023
Multiple Vulnerabilities
<= 1.0.23
08/02/2016
Addslashes SQL Injection
<= 1.1.24
27/01/2016
Multiple Vulnerabilities
<= 1.1.24
27/01/2016
Shortcode SQL Injection
<= 1.1.23
26/01/2016
Unauthenticated SQL Injection
<= 1.1.23
25/01/2016
Multiple vulnerabilities
<= 1.0.2
13/05/2015