CVE-2025-14383 | Booking Calendar Plugin up to 10.14.8 on WordPress dates_to_check sql injection

December 15, 2025 Yanac

A vulnerability described as critical has been identified in Booking Calendar Plugin up to 10.14.8 on WordPress. Affected by this vulnerability is an unknown functionality. Such manipulation of the argument dates_to_check leads to sql injection.

This vulnerability is documented as CVE-2025-14383. The attack can be executed remotely. There is not any exploit available.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.VulDB Recent EntriesRead More