WordPress plugin WP Simple Booking Calendar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-39541: Missing Authorization

Missing Authorization vulnerability in Roland Murg WP Simple Booking Calendar wp-simple-booking-calendar.This issue affects WP Simple Booking Calendar: from n/a through = 2.0.13...

CVE-2023-51525

Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...

CVE-2021-24726

The WP Simple Booking Calendar WordPress plugin before 2.0.6 did not escape, validate or sanitise the orderby parameter in its Search Calendars action, before using it in a SQL statement, leading to an authenticated SQL injection issue...

CVE-2024-8663

CVE-2024-8663: WP Simple Booking Calendar (WordPress)

WordPress plugin WP Simple Booking Calendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

CVE-2024-8663: Improper Neutralization of Input During Web Page Generation

The WP Simple Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.0.10. This makes it possible for unauthenticated attackers to inject...

WordPress WP Simple Booking Calendar Plugin <= 2.0.10 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple Booking Calendar Type Plugin Vulnerable versions = 2.0.10 Fixed in 2.0.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8663 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 00e7be38a235 Credits vgo0...

CVE-2023-51525

Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...

CVE-2023-51525

CVE-2023-51525 concerns the WordPress plugin WP Simple Booking Calendar (Veribo/Roland Murg). A CSRF vulnerability affects versions up to 2.0.8.4 (likely fixed in later releases). Root cause: improper CSRF protection enabling unauthorized actions on behalf of an authenticated user. Impact: potent...

CVE-2023-51525 WordPress WP Simple Booking Calendar plugin <= 2.0.8.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...

CVE-2023-51525: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP Simple Booking Calendar: from n/a through 2.0.8.4...

WordPress plugin WP Simple Booking Calendar Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

WordPress WP Simple Booking Calendar Plugin <= 2.0.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Simple Booking Calendar Type Plugin Vulnerable versions = 2.0.8.4 Fixed in 2.0.8.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-51525 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7e20b6088220 Credits...

CVE-2021-24726

The WP Simple Booking Calendar WordPress plugin before 2.0.6 did not escape, validate or sanitise the orderby parameter in its Search Calendars action, before using it in a SQL statement, leading to an authenticated SQL injection issue...

CVE-2021-24726

The WP Simple Booking Calendar WordPress plugin before 2.0.6 did not escape, validate or sanitise the orderby parameter in its Search Calendars action, before using it in a SQL statement, leading to an authenticated SQL injection issue...

CVE-2021-24726

The CVE relates to the WordPress plugin WP Simple Booking Calendar (versions before 2.0.6). Affected component: the Search Calendars action; root cause is failure to escape/validate/sanitize the orderby parameter, which is used in a SQL statement. This results in an authenticated SQL injection vu...

PT-2021-16229

Name of the Vulnerable Software and Affected Versions WP Simple Booking Calendar versions prior to 2.0.6 Description The issue is related to an authenticated SQL injection problem. It occurs because the orderby parameter in the Search Calendars action is not properly escaped, validated, or...

CVE-2021-24726: Improper Neutralization of Special Elements used in an SQL Command

The WP Simple Booking Calendar WordPress plugin before 2.0.6 did not escape, validate or sanitise the orderby parameter in its Search Calendars action, before using it in a SQL statement, leading to an authenticated SQL injection issue...

WordPress WP Simple Booking Calendar plugin <= 2.0.6 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Martin Vierula Trustwave in WordPress WP Simple Booking Calendar plugin versions = 2.0.6. Solution Update the WordPress WP Simple Booking Calendar plugin to the latest available version at least 2.0.7...