CVE-2023-24407: Wpdevart Booking Calendar

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.3.

Affected products

• Wpdevart Booking Calendar: before 3.2.4 (fixed in 3.2.4)

Published 2024-12-09. Last modified 2026-06-17.