CVE-2018-10363: Wpdevart Booking Calendar

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices.

Affected products

• Wpdevart Booking Calendar: version 2.2.2 only

Published 2018-06-13. Last modified 2026-06-17.