https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T03:11:23.299634+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337559 EUVD-2026-337559 2026-10-05T03:11:23.301885+00:00 EUVD-2026-337559 https://cve.radiocsirt.org/vuln/fkie_cve-2016-20069 fkie_cve-2016-20069 2026-10-05T03:11:23.301921+00:00

WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shortcode function that fails to sanitize the calendar parameter before using it in database queries. Attackers can inject SQL commands through the calendar shortcode parameter to execute arbitrary SQL queries and extract sensitive database information.

 https://cve.radiocsirt.org/vuln/ghsa-7mqg-hw4x-hr9x GHSA-7mqg-hw4x-hr9x 2026-10-05T03:11:23.301954+00:00

WordPress Booking Calendar Contact Form 1.0.23 contains an unauthenticated blind SQL injection vulnerability in the shortcode function that fails to sanitize the calendar parameter before using it in database queries. Attackers can inject SQL commands through the calendar shortcode parameter to execute arbitrary SQL queries and extract sensitive database information.