WordPress security by component
QuickCal - Appointment Booking Calendar for WordPress
Plugin description
QuickCal - Appointment Booking Calendar for WordPress is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jul 23, 2026; the highest CVE/CNA score is 8.8.
Plugin slug:
quickcalLatest vulnerability
CVE-2026-27377: QuickCal - Appointment Booking Calendar for WordPress: A security weakness
QuickCal - Appointment Booking Calendar for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 1.0.16.
| Safe version |
|
||
|---|---|---|---|
| Jul 23, 2026 |
CVE-2026-27377
QuickCal - Appointment Booking Calendar for WordPress: A security weakness
QuickCal - Appointment Booking Calendar for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 1.0.16.
|
> 1.0.16 |
CVE6.7
NVDPending
|
| May 16, 2025 |
CVE-2025-32310
QuickCal - Appointment Booking Calendar for WordPress: Privilege escalation or authentication bypass
QuickCal - Appointment Booking Calendar for WordPress is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE8.8
NVDPending
|
| May 16, 2025 |
CVE-2025-32299
QuickCal - Appointment Booking Calendar for WordPress: A security weakness
QuickCal - Appointment Booking Calendar for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|