Dwbooster
24 CVEs across 11 Dwbooster products. Browse Dwbooster vulnerabilities, severities, and proof-of-concept exploits.
Dwbooster products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-20084 | High | 7.2 | 2026-06-15 | WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar se… |
CVE-2016-20070 | Medium | 6.4 | 2026-06-15 | WordPress Booking Calendar Contact Form 1.0.23 contains privilege escalation and stored cross-site scripting vulnerabilities that allow authenticated users to… |
CVE-2016-20069 | High | 8.2 | 2026-06-15 | WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shortcode function that fails to sanitize t… |
CVE-2016-20068 | High | 8.2 | 2026-06-15 | WordPress Booking Calendar Contact Form version 1.0.23 contains an unauthenticated blind SQL injection vulnerability that allows remote attackers to execute ar… |
CVE-2016-20067 | Medium | 4.3 | 2026-06-15 | WordPress CP Polls 1.0.8 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of authenticated u… |
CVE-2016-20066 | High | 7.2 | 2026-06-15 | WordPress CP Polls 1.0.8 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through unsanitized file up… |
CVE-2024-13758 | Medium | 6.5 | 2025-01-30 | The CP Contact Form with PayPal plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.52. This is due to m… |
CVE-2023-6446 | Medium | 4.4 | 2024-01-11 | The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.40 du… |
CVE-2023-41732 | Medium | 5.4 | 2023-10-06 | Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Blocks plugin <= 1.0.20 versions. |
CVE-2022-3427 | High | 8.8 | 2022-12-15 | The Corner Ad plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.56. This is due to missing or incorrect no… |
CVE-2022-4036 | Medium | 5.3 | 2022-11-29 | The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insuffici… |
CVE-2022-4035 | High | 7.2 | 2022-11-29 | The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field parameters in versions up to, and includin… |
CVE-2022-4034 | Medium | 5.8 | 2022-11-29 | The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthent… |
CVE-2022-41692 | Medium | 4.3 | 2022-11-18 | Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress. |
CVE-2022-2846 | Medium | 4.3 | 2022-08-16 | The Calendar Event Multi View WordPress plugin before 1.4.07 does not have any authorisation and CSRF checks in place when creating an event, and is also lacki… |
CVE-2022-2169 | Medium | 4.8 | 2022-07-17 | The Loading Page with Loading Screen WordPress plugin before 1.0.83 does not escape its settings, allowing high privilege users such as admin to perform cross-… |
CVE-2022-1710 | Medium | 4.8 | 2022-06-13 | The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege us… |
CVE-2022-1692 | Critical | 9.8 | 2022-06-08 | The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statemen… |
CVE-2022-0448 | Medium | 4.8 | 2022-03-07 | The CP Blocks WordPress plugin before 1.0.15 does not sanitise and escape its "License ID" settings, which could allow high privilege users to perform Cross-Si… |
CVE-2021-24712 | Medium | 5.4 | 2021-10-11 | The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars. |
CVE-2021-24673 | Medium | 4.8 | 2021-10-04 | The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored… |
CVE-2021-24498 | Medium | 6.1 | 2021-08-02 | The Calendar Event Multi View WordPress plugin before 1.4.01 does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the pag… |
CVE-2017-18579 | Medium | 6.1 | 2019-08-22 | The corner-ad plugin before 1.0.8 for WordPress has XSS. |
CVE-2019-13505 | Medium | 6.1 | 2019-07-11 | The Appointment Hour Booking plugin 1.1.44 for WordPress allows XSS via the E-mail field, as demonstrated by email_1. |