PT-2026-25205
CVE-2026-32358
·
Published
2026-02-14
·
Updated
2026-03-15
Description by
CVSS 3.1
7.6
HighMetricsAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions
wpdevelop Booking Calendar versions through 10.14.15
Description
A flaw exists in wpdevelop Booking Calendar that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. This issue could potentially allow an attacker to extract sensitive information from the database.
Recommendations
Update wpdevelop Booking Calendar to a version later than 10.14.15.
Found an issue in the description? Have something to add? Feel free to write us 👾