Skip to content
PluginCanary

Bookit - Booking & Appointment Calendar

by Nexcess · 4,000+ active installs · Checked 3 Nov 2026
Healthy7 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 2.6.0.7.

81/ 100 Canary Score
Sub-scores for Bookit - Booking & Appointment Calendar
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 2.6.0.7. Update to version 2.6.0.7 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 2.6.0.7. Update to version 2.6.0.7 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 2.6.0.6. Update to version 2.6.0.6 or later.16 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 16 Sep 2026, fixed in 2.6.0.5. Update to version 2.6.0.5 or later.16 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 16 Sep 2026, fixed in 2.6.0.5. Update to version 2.6.0.5 or later.16 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 13 Sep 2026, fixed in 2.6.0.1. Update to version 2.6.0.1 or later.13 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 2.6.0.4. Update to version 2.6.0.4 or later.3 Sep 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master30 Jan 2019 to 30 Jan 2019, 1 commits
stylemix31 Jan 2019 to 5 Apr 2024, 79 commits
stellarwp18 Jul 2024 to 18 Jul 2024, 3 commits
bordoni22 Aug 2024 to 10 Nov 2025, 4 commits
redscar13 Jan 2026 to 29 May 2026, 10 commits
rahulapalu8 Jul 2026 to 1 Sep 2026, 8 commits
sdokus29 Jul 2026 to 15 Oct 2026, 6 commits
larodiel29 Oct 2026 to 29 Oct 2026, 3 commits

New committer larodiel made a first commit on 29 Oct 2026. New committer sdokus made a first commit on 29 Jul 2026. New committer rahulapalu made a first commit on 8 Jul 2026.

Maintenance

Last release
5 days ago
Releases, 24 months
14
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Bookit - Booking & Appointment Calendar
Q1 20240
Q2 20242
Q3 20241
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20251
Q1 20263
Q2 20262
Q3 20266
Q4 20262

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026Bookit — Booking & Appointment Calendar <= 2.6.0.6 - Missing Authorization4.3<= 2.6.0.62.6.0.70
30 Oct 2026Bookit — Booking & Appointment Calendar <= 2.6.0.6 - Unauthenticated SQL Injection7.5<= 2.6.0.62.6.0.70
16 Oct 2026Bookit — Booking & Appointment Calendar <= 2.6.0.5 - Missing Authorization5.3<= 2.6.0.52.6.0.60
16 Sep 2026Bookit <= 2.6.0.4 - Missing Authorization4.3<= 2.6.0.42.6.0.50
16 Sep 2026Bookit <= 2.6.0.4 - Authenticated (Bookit Staff+) Information Exposure4.3<= 2.6.0.42.6.0.50
13 Sep 2026Bookit — Booking & Appointment Calendar < 2.6.0.1 - Unauthenticated Information Exposure5.3< 2.6.0.12.6.0.10
3 Sep 2026Bookit — Booking & Appointment Calendar <= 2.6.0.3 - Missing Authorization5.3<= 2.6.0.32.6.0.40
22 Apr 2026Bookit — Booking & Appointment Calendar <= 2.5.1 - Missing Authorization5.3<= 2.5.12.5.4.10
15 Nov 2025Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Settings Update5.3<= 2.5.02.5.10
11 Nov 2025Booking Calendar | Appointment Booking | Bookit <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection7.5<= 2.5.02.5.10
31 Jan 2024BookIt <=2.4.0 - Price Bypass4.9<= 2.4.02.4.10
21 Dec 2023BookIt <= 2.4.3 - Authenticated(Administrator+) SQL Injection6.6< 2.4.42.4.40
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.1<= 2.3.92.4.0n/a
20 Jun 2023BookIt <= 2.3.7 - Authentication Bypass9.8<= 2.3.72.3.80
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 2.2.92.2.90

Source: Wordfence Intelligence.

Reputation

Lifetime rating 3.8 from 24 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star15
4 star1
3 star1
2 star1
1 star6

Momentum

4,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Bookit - Booking & Appointment Calendar
4 May 2026114
11 May 2026240
18 May 2026365
25 May 20261,629
1 Jun 2026435
8 Jun 2026314
15 Jun 2026274
22 Jun 2026208
29 Jun 2026229
6 Jul 20261,829
13 Jul 2026379
20 Jul 2026273
27 Jul 20261,712
3 Aug 2026571
10 Aug 2026277
17 Aug 20261,911
24 Aug 20261,780
31 Aug 20261,893
7 Sep 2026421
14 Sep 20262,138
21 Sep 2026465
28 Sep 2026374
5 Oct 2026352
12 Oct 20261,739
19 Oct 2026677
26 Oct 20262,308
2 Nov 2026187

Weekly downloads over the last 4 weeks are 44% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SimplyBook.me - Booking and reservations calendarScore 91 · 30,000+MotoPress Hotel Booking for ElementorScore 91 · 10,000+MotoPress Hotel Booking Styles & TemplatesScore 91 · 10,000+SetmoreScore 91 · 4,000+Zenchef widget integrationScore 91 · 2,000+

Facts

Version2.6.0.7
AuthorNexcess
Added31 Jan 2019
Last updated29 Oct 2026
Active installs4,000+
Requires WordPress6.3
Tested up to7.1.4
Requires PHP7.4
CategoryBookings & Scheduling > Appointment Scheduling
Tagsbooking, calendar, booking calendar, appointment booking, appointment calendar

Other plugins by this author: Kadence Security - Password, Two Factor Authentication, and Brute Force Protection, The Events Calendar, Kadence Blocks - Page Builder Toolkit for Gutenberg Editor, Kadence Starter Templates - Predesigned Website Templates, GiveWP - Donation Plugin and Fundraising Platform, Image Widget, Event Tickets and Registration, Kadence WooCommerce Email Designer, Kadence Central - Site Management, Backups, Security, and Reporting, Virtue/Ascend/Pinnacle Toolkit, Membership Plugin - Kadence Memberships, GiveWP Donation Widgets for Elementor

Questions

Is Bookit - Booking & Appointment Calendar still maintained?

Bookit - Booking & Appointment Calendar was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is Bookit - Booking & Appointment Calendar safe?

Bookit - Booking & Appointment Calendar has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Bookit - Booking & Appointment Calendar?

The wordpress.org author is Nexcess. Recent committers: larodiel, sdokus, rahulapalu, redscar, bordoni. New committer larodiel made a first commit on 29 Oct 2026.

What can I use instead of Bookit - Booking & Appointment Calendar?

Plugins in the same category with a higher Canary Score: SimplyBook.me - Booking and reservations calendar, MotoPress Hotel Booking for Elementor, MotoPress Hotel Booking Styles & Templates, Setmore, Zenchef widget integration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue