CVE-2026-18496 | wpdevelop Booking Calendar Plugin up to 11.4.3 on WordPress wpbc_is_show_popover_in_flex_timeline information disclosure

October 10, 2026 Yanac

A vulnerability was found in wpdevelop Booking Calendar Plugin up to 11.4.3 on WordPress. It has been declared as problematic. This affects the function wpbc_is_show_popover_in_flex_timeline. Such manipulation leads to information disclosure.

This vulnerability is uniquely identified as CVE-2026-18496. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More