CVE-2022-36399: WordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposure

WordPress Booked Plugin < 2.4.4 is vulnerable to Sensitive Data Exposure

Status

Published

2023-12-28

Updated

2026-04-28

Assigning organization

Patchstack

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in BoxyStudio Booked - Appointment Booking for WordPress | Calendars.This issue affects Booked - Appointment Booking for WordPress | Calendars: from n/a before 2.4.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BoxyStudio Booked - Appointment Booking for WordPress | Calendars

Default version status: unaffected

n/a to < 2.4.4affected

References

https://patchstack.com/database/vulnerability/booked/wordpress-booked-plugin-2-4-unauth-appointment-data-exposure-vulnerability?_s_id=cve ↗