This software is likely abandoned and might not receive any further security fixes.
Vulnerability history
6 present
4 patched
Shortcode Injection vulnerability
6.5
4 August, 2025
WordPress Event & Booking Manager Plugin plugin <= 3.9.6 SQL Injection vulnerability
9.3
16 May, 2025
WordPress Event & Booking Manager Plugin plugin <= 3.9.6 Broken Access Control vulnerability
4.3
16 May, 2025
Authenticated (Subscriber+) SQL Injection via reg_id vulnerability
8.5
6 March, 2025
WordPress Event & Booking Manager Plugin plugin < 3.9.9 Reflected Cross Site Scripting (XSS) vulnerability
7.1
4 February, 2025
