CVEs we hold for Wpdevelop

Records whose assigning authority named Wpdevelop as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-92619Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameterwpdevelop Booking Calendar

CVE-2026-92561Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameterwpdevelop Booking Calendar

CVE-2026-81777WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2026-74002WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerabilitywpdevelop Booking Calendar

CVE-2026-66667WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper Templately

CVE-2026-66645WordPress Table Of Contents Block plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper Table Of Contents Block

CVE-2026-65562WordPress BetterDocs plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper BetterDocs

CVE-2026-61961WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper EmbedPress

CVE-2026-59558WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerabilitywpdevelop Booking Calendar

CVE-2026-57364WordPress Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More plugin <= 2.2.0 - Other…WPDeveloper Better Payment – Instant Payments, Donations…

CVE-2026-48872WordPress EmbedPress plugin <= 4.5.2 - Sensitive Data Exposure vulnerabilityWPDeveloper EmbedPress

CVE-2026-42751WordPress Booking Manager plugin <= 2.1.18 - Cross Site Scripting (XSS) vulnerabilitywpdevelop Booking Manager

CVE-2026-42644WordPress BetterDocs plugin <= 4.3.10 - Sensitive Data Exposure vulnerabilityWPDeveloper BetterDocs

CVE-2026-42379WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerabilityWPDeveloper Templately

CVE-2026-32358WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerabilitywpdevelop Booking Calendar

CVE-2026-27042WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerabilityWPDeveloper NotificationX

CVE-2026-25440WordPress Essential Addons for Elementor plugin < 6.6.0 - Broken Access Control vulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2026-23543WordPress Essential Addons for Elementor plugin <= 6.5.5 - Broken Access Control vulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2026-2230Booking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings…wpdevelop Booking Calendar

CVE-2026-1431Booking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposurewpdevelop Booking Calendar

CVE-2025-9346Booking Calendar <= 10.14.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingwpdevelop Booking Calendar

CVE-2025-69092WordPress Essential Addons for Elementor plugin <= 6.5.3 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2025-64381WordPress Booking Calendar plugin <= 10.14.7 - Cross Site Scripting (XSS) vulnerabilitywpdevelop Booking Calendar

CVE-2025-64352WordPress Essential Addons for Elementor plugin <= 6.2.4 - Broken Access Control vulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2025-64275WordPress Booking Manager plugin <= 2.1.17 - Cross Site Scripting (XSS) vulnerabilitywpdevelop Booking Manager

CVE-2025-49408WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure VulnerabilityWPDeveloper Templately

CVE-2025-4669Booking Calendar <= 10.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpbc Shortcodewpdevelop Booking Calendar

CVE-2025-39590WordPress Essential Addons for Elementor plugin <= 6.1.9 - Cross Site Scripting (XSS) VulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2025-39589WordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure VulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2025-26871WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerabilityWPDeveloper Essential Blocks for Gutenberg

CVE-2025-25086WordPress Secret Meta plugin <= 1.2.1 - CSRF to Reflected Cross Site Scripting (XSS) vulnerabilityWPDeveloper Secret Meta

CVE-2025-24752WordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2025-22696WordPress Document Block – Upload & Embed Docs, PDF, PPT, XLS or Any Documents plugin <= 1.1.0 - Broken Access Control…WPDeveloper Document Block – Upload & Embed Docs

CVE-2025-22683WordPress NotificationX plugin <= 2.9.5 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper NotificationX

CVE-2025-22315WordPress Typing Text plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper Typing Text

CVE-2025-14982Booking Calendar <= 10.14.11 - Missing Authorization to Sensitive Information Exposurewpdevelop Booking Calendar

CVE-2025-14383Booking Calendar <= 10.14.8 - Unauthenticated SQL Injection via dates_to_checkwpdevelop Booking Calendar

CVE-2025-14146Booking Calendar <= 10.14.10 - Unauthenticated Sensitive Information Exposurewpdevelop Booking Calendar

CVE-2025-12804Booking Calendar <= 10.14.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingcalendar Shortcodewpdevelop Booking Calendar

CVE-2024-9306WP Booking Calendar <= 10.6 - Authenticated (Admin+) Stored Cross-Site Scriptingwpdevelop Booking Calendar

CVE-2024-8274WP Booking Calendar <= 10.5 - Reflected Cross-Site Scriptingwpdevelop Booking Calendar

CVE-2024-6930WP Booking Calendar <= 10.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bookingform Shortcodewpdevelop Booking Calendar

CVE-2024-56292WordPress Email Reminders Plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerabilitywpdevelop Email Reminders

CVE-2024-56063WordPress Essential Addons for Elementor plugin <= 6.0.7 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2024-51672WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerabilityWPDeveloper BetterLinks

CVE-2024-5058WordPress Typing Text plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper Typing Text

CVE-2024-50461WordPress EmbedPress plugin <= 4.0.14 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper EmbedPress

CVE-2024-50424WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerabilityWPDeveloper Templately

CVE-2024-50423WordPress Templately plugin <= 3.1.5 - Broken Access Control vulnerabilityWPDeveloper Templately

CVE-2024-47385WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper Essential Blocks for Gutenberg

CVE-2024-47308WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerabilityWPDeveloper Templately

CVE-2024-43936WordPress EmbedPress plugin <= 4.0.8 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper EmbedPress

CVE-2024-43328WordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerabilityWPDeveloper EmbedPress

CVE-2024-43227WordPress BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor &…WPDeveloper BetterDocs

CVE-2024-43129WordPress BetterDocs plugin <= 3.5.8 - Local File Inclusion vulnerabilityWPDeveloper BetterDocs

CVE-2024-39649WordPress Essential Addons for Elementor plugin <= 5.9.26 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2024-38707WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerabilityWPDeveloper EmbedPress

CVE-2024-32717WordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerabilityWPDeveloper SchedulePress

CVE-2024-31306WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerabilityWPDeveloper Essential Blocks for Gutenberg

CVE-2024-31284WordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerabilityWPDeveloper EmbedPress

CVE-2024-31274WordPress EmbedPress plugin <= 3.9.11 - Broken Access Control vulnerabilityWPDeveloper EmbedPress

CVE-2024-30467WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerabilityWPDeveloper Essential Blocks for Gutenberg

CVE-2024-30226WordPress BetterDocs plugin <= 3.3.3 - Unauthenticated PHP Object Injection vulnerabilityWPDeveloper BetterDocs

CVE-2024-13821WP Booking Calendar <= 10.10 - Unauthenticated Post-Confirmation Booking Manipulationwpdevelop Booking Calendar

CVE-2024-13323Booking Calendar <= 10.9.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'booking' Shortcodewpdevelop Booking Calendar

CVE-2024-1207Booking Calendar <= 9.9 - Unauthenticated SQL Injectionwpdevelop Booking Calendar

CVE-2024-11945Email Reminders <= 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameterwpdevelop Email Reminders

CVE-2023-51520WordPress Booking Calendar Plugin < 9.7.4 is vulnerable to Cross Site Scripting (XSS)WPdevelop / Oplugins WP Booking Calendar

CVE-2023-51375WordPress EmbedPress plugin <= 3.8.3 - Broken Access Control vulnerabilityWPDeveloper EmbedPress

CVE-2023-51360WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerabilityWPDeveloper Essential Blocks for Gutenberg

CVE-2023-51359WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerabilityWPDeveloper Essential Blocks for Gutenberg

CVE-2023-50840WordPress Booking Manager Plugin <= 2.1.5 is vulnerable to SQL Injectionwpdevelop, oplugins Booking Manager

CVE-2023-49184WordPress Parallax Slider Block Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)WPDeveloper Parallax Slider Block

CVE-2023-47762WordPress BetterDocs plugin <= 2.5.2 - Broken Access Control vulnerabilityWPDeveloper BetterDocs

CVE-2023-47761WordPress Simple 301 Redirects by BetterLinks plugin <= 2.0.7 - Broken Access Control vulnerabilityWPDeveloper Simple 301 Redirects by BetterLinks

CVE-2023-47760WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerabilityWPDeveloper Essential Blocks for Gutenberg

CVE-2023-45104WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerabilityWPDeveloper BetterLinks

CVE-2023-41955WordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerabilityWPDeveloper Essential Addons for Elementor

CVE-2023-32245WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Server Side Request Forgery (SSRF)WPDeveloper Essential Addons for Elementor Pro

CVE-2023-32243WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege EscalationWPDeveloper Essential Addons for Elementor

CVE-2023-32241WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)WPDeveloper Essential Addons for Elementor Pro

CVE-2023-23991WordPress Booking Calendar plugin <= 9.4.3 - SQL InjectionWPdevelop / Oplugins Booking Calendar

CVE-2022-47594WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access ControlWPDeveloper Essential Blocks for Gutenberg

CVE-2022-46809WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV InjectionWPDeveloper ReviewX – Multi-criteria Rating & Reviews for…

CVE-2022-33177WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulityWPdevelop/Oplugins Booking Calendar (WordPress plugin)

CVE-2022-1463Booking Calendar <= 9.1 - PHP Object Injection via Shortcodewpdevelop Booking Calendar

CVE-2017-2151no title heldwpdevelop Booking Calendar

CVE-2017-2150no title heldwpdevelop Booking Calendar

88 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.