CVE-2023-23991: Wpdevelop / Oplugins Booking Calendar

High severity, CVSS 7.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdevelop / Oplugins Booking Calendar allows SQL Injection.This issue affects Booking Calendar: from n/a through 9.4.3.

Affected products

• Wpdevelop / Oplugins Booking Calendar: up to and including 9.4.3

Published 2024-03-26. Last modified 2026-06-17.