Radar sectionsPlugins & themes
Check my site

WordPress plugin

Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar security & vulnerabilities

booking-manager— active installsLast vulnerability Sep 21, 2026

No known unpatched vulnerabilities in the latest version

All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

7Known vulnerabilities
  • Critical0
  • High1
  • Medium6
  • Low0
Vulnerabilities per year
2023: 2 vulnerabilities2232025: 2 vulnerabilities2252026: 3 vulnerabilities326

All Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar vulnerabilities

Nothing in this view

No vulnerabilities match this filter. Show all.

Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar: common questions

Does Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar have known vulnerabilities?

Yes. VulnCrest Radar lists 7 known vulnerabilities in Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar: 1 high, 6 medium. None are known to affect version null.

How do I check which version of Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar vulnerability?

CVE-2026-91025, published Sep 21, 2026: Booking Manager <= 2.1.20 - Authenticated (Subscriber+) Insecure Direct Object Reference. Severity: Medium (CVSS 4.3).

Is any Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar vulnerability listed in CISA KEV?

No. None of the known Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?