https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T11:26:36.224208+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337557 EUVD-2026-337557 2026-10-05T11:26:36.226544+00:00 EUVD-2026-337557 https://cve.radiocsirt.org/vuln/fkie_cve-2016-20068 fkie_cve-2016-20068 2026-10-05T11:26:36.226580+00:00

WordPress Booking Calendar Contact Form version 1.0.23 contains an unauthenticated blind SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send requests to the admin-ajax.php endpoint with the action parameter set to 'dex_bccf_calendar_ajaxevent' and supply crafted SQL commands in the 'id' parameter to extract sensitive database information.

 https://cve.radiocsirt.org/vuln/ghsa-6pm2-2464-mj8p GHSA-6pm2-2464-mj8p 2026-10-05T11:26:36.226615+00:00

WordPress Booking Calendar Contact Form version 1.0.23 contains an unauthenticated blind SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send requests to the admin-ajax.php endpoint with the action parameter set to 'dex_bccf_calendar_ajaxevent' and supply crafted SQL commands in the 'id' parameter to extract sensitive database information.