No patched version is available. No reply from the vendor.
minhtuanact discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Advanced Booking Calendar Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. This vulnerability has not been known to be fixed yet.
Unauth. SQL Injection (SQLi) vulnerability
10.0
02.12.2022
Unauthenticated SQL Injection (SQLi) vulnerability
8.3
28.02.2022
Authenticated Reflected CrossSite Scripting (XSS) vulnerability
6.2
30.03.2021
Unauthenticated SQL Injection (SQLi) vulnerability
22.10.2020
Successfully submit vulnerabilities and receive an invite to our Alliance platform.
Learn more
Close
Advanced Booking Calendar
LinkedIn
Facebook
Twitter
Join Discord
