WordPress plugin
WP Simple Booking Calendar security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium3
- Low0
All WP Simple Booking Calendar vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤2.0.13Update to 2.0.14 | CVE-2025-39541 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.0.10Update to 2.0.11 | CVE-2024-8663 | |
| Medium4.3 | Cross-Site Request Forgery ≤2.0.8.4Update to 2.0.8.5 | CVE-2023-51525 | |
| High8.8 | Authenticated SQL Injection ≤2.0.6Update to 2.0.7 | CVE-2021-24726 |
- Medium4.3Missing Authorization
≤2.0.13Update to 2.0.14
- Medium6.1Reflected Cross-Site Scripting
≤2.0.10Update to 2.0.11
- Medium4.3Cross-Site Request Forgery
≤2.0.8.4Update to 2.0.8.5
- High8.8Authenticated SQL Injection
≤2.0.6Update to 2.0.7
WP Simple Booking Calendar: common questions
Does WP Simple Booking Calendar have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in WP Simple Booking Calendar: 1 high, 3 medium. None are known to affect version null.
How do I check which version of WP Simple Booking Calendar I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Simple Booking Calendar vulnerability?
CVE-2025-39541, published Apr 16, 2025: WP Simple Booking Calendar <= 2.0.13 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any WP Simple Booking Calendar vulnerability listed in CISA KEV?
No. None of the known WP Simple Booking Calendar vulnerabilities is currently listed in the CISA KEV catalog.