Skip to content
PluginCanary

Booking calendar, Appointment Booking System

Fewer than 10 active installs · Checked 3 Nov 2026
Avoid6 Criticals

Avoid: Booking calendar, Appointment Booking System is closed on wordpress.org and no longer gets updates.

10/ 100 Canary Score

Capped at 10 because the plugin is closed.

Sub-scores for Booking calendar, Appointment Booking System
Ownership100
Maintenance10
Security0
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 18 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.1 Sep 2026Evidence
  • CriticalSEC-2Vulnerability published 17 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.31 Aug 2026Evidence
  • CriticalSEC-2Vulnerability published 14 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.28 Aug 2026Evidence
  • CriticalCLS-1Closed on wordpress.org on 31 Jul 2026, reason: security issue. Replace this plugin. It no longer receives updates from wordpress.org.31 Jul 2026Evidence
  • CriticalSEC-2Vulnerability published 2 Jul 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.16 Jul 2026Evidence
  • CriticalSEC-2Vulnerability published 18 Mar 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.1 Apr 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
not recorded
Releases, 24 months
0
Tested up to
not stated vs 7.1
Requires PHP
not stated supported 8.2+

Release history builds as we see new versions.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
18 Aug 2026Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Insecure Direct Object Reference5.3<= 3.2.36No fixn/a
17 Aug 2026Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.2.36No fixn/a
14 Aug 2026Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX Action5.3<= 3.2.36No fixn/a
2 Jul 2026Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization5.3<= 3.2.36No fixn/a
18 Mar 2026Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.2.36No fixn/a
15 Dec 2025Booking calendar, Appointment Booking System <= 3.2.30 - Missing Authorization5.3<= 3.2.303.2.31n/a
1 Jul 2025Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'5.9<= 3.2.173.2.18n/a
6 Jan 2025Booking Calendar and Booking Calendar Pro <= Multiple Versions - Reflected Cross-Site Scripting via 'calendar_id'6.1<= 3.2.193.2.20n/a
23 Dec 2024Booking Calendar WpDevArt <= 3.2.19 - Authenticated (Contributor+) SQL Injection6.5<= 3.2.193.2.20n/a
25 Nov 2024Booking calendar, Appointment Booking System <= 3.2.15 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload7.2<= 3.2.153.2.16n/a
27 Jan 2024Booking calendar, Appointment Booking System <= 3.2.3 - Missing Authorization4.1<= 3.2.33.2.4n/a
29 Oct 2023Booking Calendar WpDevArt <= 3.2.11 - Authenticated (Admin+) SQL Injection7.2<= 3.2.113.2.12n/a
12 Sep 2023Booking calendar, Appointment Booking System <= 3.2.8 - Multiple Authenticated(Editor+) SQL Injection7.2< 3.2.93.2.9n/a
19 Apr 2023Booking calendar, Appointment Booking System <= 3.2.6 - Authenticated (Administrator+) SQL Injection via *_selected7.2<= 3.2.63.2.7n/a
27 Jan 2023Booking calendar, Appointment Booking System <= 3.2.3 - Cross-Site Request Forgery4.3<= 3.2.33.2.4n/a
27 Jan 2023Booking calendar, Appointment Booking System <= 3.2.3 - Authenticated (Editor+) Stored Cross-Site Scripting5.5<= 3.2.33.2.4n/a
27 Jan 2023Booking calendar, Appointment Booking System <= 3.2.3 - Unauthenticated Bypass Vulnerability5.3<= 3.2.33.2.4n/a
21 Nov 2022Booking calendar, Appointment Booking System <= 3.2.1 - Unauthenticated Arbitrary File Upload9.8<= 3.2.13.2.2n/a
7 Jun 2018Booking calendar, Appointment Booking System < 2.2.3 - Unauthenticated Parameter Manipulation7.5<= 2.2.22.2.3n/a
12 Jan 2018Booking calendar, Appointment Booking System <= 2.1.7 - Cross-Site Request Forgery8.8< 2.1.82.1.8n/a
11 Jan 2018Booking calendar, Appointment Booking System <= 2.1.7 - Cross-Site Scripting5.5< 2.1.82.1.8n/a
11 Jan 2018Booking calendar, Appointment Booking System <= 2.1.7 - Cross-Site Scripting5.5< 2.1.82.1.8n/a
11 Jan 2018Booking calendar, Appointment Booking System <= 2.1.7 - Cross-Site Scripting5.5< 2.1.82.1.8n/a

Source: Wordfence Intelligence.

Reputation

No ratings yet.

Momentum

Fewer than 10 active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Versionnot stated
Authornot stated
Addednot stated
Last updatednot stated
Active installsFewer than 10
Requires WordPressnot stated
Tested up tonot stated
Requires PHPnot stated
CategoryBookings & Scheduling > Appointment Scheduling
Tagsnot stated

Questions

Is Booking calendar, Appointment Booking System still maintained?

No. Booking calendar, Appointment Booking System was closed on wordpress.org on 31 Jul 2026 (security issue) and gets no updates there.

Is Booking calendar, Appointment Booking System safe?

Booking calendar, Appointment Booking System has 5 published vulnerabilities with no patched version. Its Canary status is Avoid.

Who owns Booking calendar, Appointment Booking System?

The wordpress.org author is not listed. We have recorded no ownership change.

What can I use instead of Booking calendar, Appointment Booking System?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue