Skip to content
PluginCanary

WP Booking System

WP Booking System - Booking Calendar
by Roland Murg · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 29 Oct 2026, 11 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for WP Booking System
Ownership100
Maintenance100
Security60
SupportNo data
Reputation85

How the score works

Quick answers

Is WP Booking System still maintained?
Yes. Last release 29 Oct 2026, 11 releases in the last 24 months. 29 Oct 2026 · wordpress.org
Who owns WP Booking System, and has it changed hands?
No change recorded. Main committer murgroland since Jun 2019. 4 Nov 2026 · SVN log
Was WP Booking System removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP Booking System safe?
16 known vulnerabilities, all fixed (latest in 2.1.0.6). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
Is the latest WP Booking System update safe to install?
No ownership change before 2.1.0.7. No one-star spike after it. 29 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
bryght5 Mar 2014 to 6 Jun 2019, 54 commits
iova.mihai31 Oct 2018 to 21 Dec 2018, 2 commits
murgroland6 Jun 2019 to 29 Oct 2026, 125 commits

3 committers recorded. No ownership change since 2014.

Maintenance

Last release
6 days ago
Releases, 24 months
11
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for WP Booking System
Q1 20240
Q2 20241
Q3 20242
Q4 20242
Q1 20250
Q2 20250
Q3 20250
Q4 20251
Q1 20260
Q2 20261
Q3 20260
Q4 20268

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (2 reviews). Lifetime: 4.9.

Average rating per quarter for WP Booking System
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20264.4

Average rating fell from 5.0 to 4.4 between Q1 2025 and Q3 2026.

Rating distribution
5 star323
4 star8
3 star2
2 star5
1 star6
Latest low reviews

Security record

9 vulnerabilities in 24 months (16 on record), all patched (latest fixed in 2.1.0.6).

Show 16 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026WP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX Action9.1<= 2.1.0.52.1.0.6Patched before disclosure
19 Oct 2026Booking System <= 2.1.0.2 - Reflected Cross-Site Scripting6.1<= 2.1.0.22.1.0.3Patched before disclosure
16 Oct 2026WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'user_permission' Parameter via Cross-Form Nonce Reuse6.8<= 2.1.0.32.1.0.4Patched before disclosure
16 Oct 2026WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via wpbs_refresh_calendar_editor AJAX action6.5<= 2.1.0.32.1.0.4Patched before disclosure
16 Oct 2026WP Booking System <= 2.1.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'wpbs_action=email_logs' Action7.5<= 2.1.0.32.1.0.4Patched before disclosure
15 Oct 2026WP Booking System <= 2.1.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter4.9<= 2.1.0.12.1.0.2Patched before disclosure
14 Oct 2026WP Booking System - Booking Calendar < 2.1.0.1 - Unauthenticated Stored Cross-Site Scripting7.2< 2.1.0.12.1.0.1Patched before disclosure
9 Oct 2026WP Booking System <= 2.1.0.1 - Authenticated (Subscriber+) SQL Injection via 'current_month' Parameter6.5<= 2.1.0.12.1.0.2Patched before disclosure
4 Mar 2026WP Booking System - Booking Calendar <= 2.0.19.12 - Unauthenticated Information Exposure5.3<= 2.0.19.122.0.19.13Patched before disclosure
24 Oct 2024WP Booking System <= 2.0.19.10 - Missing Authorization via wpbs_refresh_calendar_editor4.3<= 2.0.19.102.0.19.11Patched before disclosure
13 Sep 2024WP Booking System - Booking Calendar <= 2.0.19.8 - Reflected Cross-Site Scripting6.1<= 2.0.19.82.0.19.9Patched before disclosure
4 Dec 2023WP Booking System <= 2.0.19.2 - Missing Authorization4.3<= 2.0.19.22.0.19.3n/a
2 Feb 2023WP Booking System <= 2.0.18 - Authenticated (Admin+) Stored Cross Site Scripting4.4<= 2.0.182.0.18.1n/a
10 Dec 2021WP Booking System - Booking Calendar <= 2.0.14 - Reflected Cross-Site Scripting6.1< 2.0.152.0.15n/a
22 May 2019WP Booking System Free version < 1.5.2 - Cross-Site Request Forgery9.8< 1.5.21.5.2Patched before disclosure
16 May 2017WP Booking System - Booking Calendar < 1.4 - Cross-Site Scripting6.1< 1.41.4Patched before disclosure

Changelog mentions of security fixes: 2.1.0.1 (security); 2.1.0.2 (security); 2.1.0.3 (security); 2.1.0.4 (security); 2.1.0.5 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Booking System
4 May 2026180
11 May 2026474
18 May 2026403
25 May 2026436
1 Jun 2026411
8 Jun 2026461
15 Jun 2026449
22 Jun 2026405
29 Jun 20265,841
6 Jul 20261,326
13 Jul 2026727
20 Jul 2026700
27 Jul 2026628
3 Aug 2026611
10 Aug 2026516
17 Aug 2026535
24 Aug 2026531
31 Aug 2026507
7 Sep 2026561
14 Sep 2026547
21 Sep 2026606
28 Sep 2026589
5 Oct 202616,220
12 Oct 202611,821
19 Oct 20266,805
26 Oct 202612,011
2 Nov 2026347

Weekly downloads over the last 4 weeks are 224% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

SimplyBook.meScore 100 · 30,000+MotoPress Hotel Booking StylesScore 100 · 10,000+MotoPress Hotel Booking for ElementorScore 100 · 10,000+EMCScore 93 · 10,000+WP Simple Booking CalendarScore 93 · 10,000+

Facts

Version2.1.0.7
AuthorRoland Murg
Added5 Mar 2014
Last updated29 Oct 2026
Active installs10,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP5.6
CategoryBookings & Scheduling > Appointment Scheduling
TagsiCalendar, booking system, booking calendar, reservation calendar, availability calendar

Other plugins by this author: WP Simple Booking Calendar, Current Menu Item for Custom Post Types

Questions

Is WP Booking System still maintained?

Yes. Last release 29 Oct 2026, 11 releases in the last 24 months.

Who owns WP Booking System, and has it changed hands?

No change recorded. Main committer murgroland since Jun 2019.

Was WP Booking System removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP Booking System safe?

16 known vulnerabilities, all fixed (latest in 2.1.0.6). Not on the exploited list.

Is the latest WP Booking System update safe to install?

No ownership change before 2.1.0.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue