CVEs we hold for Wpdevart
Records whose assigning authority named Wpdevart as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-8840Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary…wpdevart Booking calendar, Appointment Booking System
CVE-2026-73395WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Insecure Direct Object References (IDOR)…wpdevart Booking calendar, Appointment Booking System
CVE-2026-57778WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerabilitywpdevart Booking calendar, Appointment Booking System
CVE-2026-25435WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Cross Site Scripting (XSS) vulnerabilitywpdevart Booking calendar, Appointment Booking System
CVE-2026-24597WordPress Organization chart plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerabilityWpDevArt Organization chart
CVE-2026-15289Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'wpdevart Booking calendar, Appointment Booking System
CVE-2025-67574WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerabilitywpdevart Booking calendar, Appointment Booking System
CVE-2025-62886WordPress Pricing Table builder plugin <= 1.5.3 - Cross Site Request Forgery (CSRF) vulnerabilitywpdevart Pricing Table builder
CVE-2025-47443WordPress Widget Countdown plugin <= 2.7.4 - Cross Site Scripting (XSS) Vulnerabilitywpdevart Widget Countdown
CVE-2025-2537Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via…wpdevart YouTube Embed, Playlist and Popup by WpDevArt…
CVE-2025-24719WordPress Widget Countdown plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerabilitywpdevart Widget Countdown
CVE-2025-14555Countdown Timer - Widget Countdown <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodewpdevart Countdown Timer – Widget Countdown
CVE-2024-9504Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Uploadwpdevart Booking calendar, Appointment Booking System
CVE-2024-7355Organization chart <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and…wpdevart Organization chart
CVE-2024-37542WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerabilityWpDevArt Responsive Image Gallery, Gallery Album
CVE-2024-35750WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - SQL Injection vulnerabilitywpdevart Responsive Image Gallery, Gallery Album
CVE-2024-35747WordPress Contact Form Builder, Contact Widget plugin <= 2.1.7 - Bypass Vulnerability vulnerabilitywpdevart Contact Form Builder, Contact Widget
CVE-2024-31120WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerabilitywpdevart Responsive Image Gallery, Gallery Album
CVE-2024-30550WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Reflected Cross Site Scripting (XSS)…wpdevart Responsive Image Gallery, Gallery Album
CVE-2024-12077Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'WpDevArt
CVE-2024-10856Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injectionwpdevart Booking calendar, Appointment Booking System
CVE-2023-49741WordPress Coming soon and Maintenance mode plugin <= 3.7.3 - IP Filtering Bypass vulnerabilitywpdevart Coming soon and Maintenance mode
CVE-2023-47533WordPress Countdown and CountUp, WooCommerce Sales Timer Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)wpdevart Countdown and CountUp, WooCommerce Sales Timer
CVE-2023-46075WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)wpdevart Contact Form Builder, Contact Widget
CVE-2023-45631WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerabilitywpdevart Responsive Image Gallery, Gallery Album
CVE-2023-45630WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)wpdevart Gallery – Image and Video Gallery with Thumbnails
CVE-2023-45629WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)wpdevart Gallery – Image and Video Gallery with Thumbnails
CVE-2023-24407WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerabilityWpDevArt Booking calendar, Appointment Booking System
CVE-2023-24388WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery…WpDevArt Booking calendar, Appointment Booking System
CVE-2023-24387WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)WPdevart Organization chart
CVE-2023-24384WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)WpDevArt Organization chart
CVE-2023-24373WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Bypass vulnerabilityWpDevArt Booking calendar, Appointment Booking System
CVE-2023-24004WordPress Image and Video Lightbox, Image PopUp Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)WPdevart Image and Video Lightbox, Image PopUp
CVE-2023-24002WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)WpDevArt
CVE-2023-23983WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)wpdevart Responsive Vertical Icon Menu
CVE-2023-23870WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)wpdevart Responsive Vertical Icon Menu
CVE-2022-50959WordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.phpwpdevart Contact Form Builder
CVE-2022-47603WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)wpdevart Gallery – Image and Video Gallery with Thumbnails
CVE-2022-47438WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)WpDevArt Booking calendar, Appointment Booking System
CVE-2022-47428WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL InjectionWpDevArt Booking calendar, Appointment Booking System
CVE-2022-34656WordPress Poll, Survey, Questionnaire and Voting system plugin <= 1.7.4 - Authenticated Cross-Site Scripting (XSS)…wpdevart Poll, Survey, Questionnaire and Voting system…
CVE-2021-34636Countdown and CountUp, WooCommerce Sales Timer <= 1.5.7 Cross-Site Request Forgery to Stored Cross-Site ScriptingWpDevArt Countdown and CountUp, WooCommerce Sales Timers
CVE-2021-24442Poll, Survey, Questionnaire and Voting system < 1.5.3 - Unauthenticated Blind SQL Injectionwpdevart Poll, Survey, Questionnaire and Voting system
43 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.