CVE-2018-10363

7.5 highEPSS 1.3%

High (7.5) in wpdevart booking calendar. EPSS 1.3% chance of exploitation in the next 30 days.

An issue was discovered in the WpDevArt "Booking calendar, Appointment Booking System" plugin 2.2.2 for WordPress. Multiple parameters allow remote attackers to manipulate the values to change data such as prices.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wpdevart:booking_calendar

References

https://gist.github.com/B0UG/68d3161af0c0ec85c615ca7452f9755e
https://gist.github.com/B0UG/68d3161af0c0ec85c615ca7452f9755e

Check your stack JSON