Vulnerabilities and Security Researches

WP Booking Calendar, CVE-2018-20556

CVE, Research URL: CVE-2018-20556
Home page URL: Security reports for WP Booking Calendar
Application: WP Booking Calendar
Published on: Mar 21, 2019
Research Description: SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter.
Affected versions: Min -, max 8.4.5.15.
Status: vulnerable