Advanced Booking Calendar vulnerabilities

2 known vulnerabilities affecting advanced_booking_calendar/advanced_booking_calendar.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-45822CRITICALCVSS 9.8≥ n/a, ≤ 1.7.12022-12-05

CVE-2022-45822 [CRITICAL] CWE-89 CVE-2022-45822: Unauth. SQL Injection (SQLi) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress Unauth. SQL Injection (SQLi) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.

CVE-2022-45824MEDIUMCVSS 6.5≥ n/a, ≤ 1.7.12022-12-05

CVE-2022-45824 [MEDIUM] CWE-352 CVE-2022-45824: Cross-Site Request Forgery (CSRF) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on Word Cross-Site Request Forgery (CSRF) vulnerability in Advanced Booking Calendar plugin <= 1.7.1 on WordPress.